514 matches found
CVE-2024-30872: Improper Neutralization of Special Elements used in an SQL Command
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /include/authrp.php...
CVE-2024-30872
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /include/authrp.php...
CVE-2024-30871
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/applyhardware.php...
CVE-2024-30865
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edituserlogin.php...
CVE-2024-30870: Improper Neutralization of Special Elements used in an SQL Command
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/addressinterpret.php...
CVE-2024-30866
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/menu.php...
CVE-2024-30858: Improper Control of Generation of Code
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/editfirewall.php...
CVE-2024-30863
Netentsec NS-ASG version 6.3 is vulnerable to SQL Injection due to improper neutralization of special elements in the "/WebPages/history.php" API endpoint. This vulnerability allows for potential unauthorized access or manipulation of data. As a temporary workaround, it is recommended to restrict...
CVE-2024-30865
The netentsec NS-ASG application security gateway, specifically version 6.3 , is vulnerable to an SQL Injection flaw. The vulnerability exists within the /admin/edit_user_login.php file, which stems from the improper neutralization of special elements used in an SQL command. Successful exploitati...
CVE-2024-30872
The netentsec NS-ASG 6.3 application security gateway is vulnerable to SQL Injection due to improper neutralization of special elements in the /include/authrp.php API endpoint. An attacker could exploit this flaw to execute unauthorized SQL commands. As a mitigation, it is recommended to restrict...
CVE-2024-30866
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/menu.php...
CVE-2024-30872
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /include/authrp.php...
CVE-2024-30871
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/applyhardware.php...
CVE-2024-30859
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configISCGroupSSLCert.php...
CVE-2024-30862
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/index.php...
CVE-2024-30864
netentsec NS-ASG version 6.3 is vulnerable to SQL Injection due to the improper neutralization of special elements used in an SQL command. The vulnerability can be exploited via the /admin/config_ISCGroupTimePolicy.php API endpoint. Practical consequences include the potential for unauthorized da...
CVE-2024-30868
The netentsec NS-ASG application security gateway (version 6.3 ) is vulnerable to SQL Injection . The flaw originates from the /admin/add_getlogin.php file, which allows an attacker to exploit the API endpoint to interact with the underlying database. While specific exploitation details are not p...
PT-2024-23638 · Netentsec · Netentsec Ns-Asg
Name of the Vulnerable Software and Affected Versions: netentsec NS-ASG version 6.3 Description: The issue is related to SQL Injection. It can be exploited via the "/admin/export excel user.php" API endpoint. Recommendations: For netentsec NS-ASG version 6.3, consider restricting access to the...
NetentSec NS-ASG 安全漏洞
NetentSec NS-ASG is an application security gateway from China NetentSec. A security vulnerability exists in NetentSec NS-ASG version 6.3, which originates from an SQL injection vulnerability in the file /admin/configguide/ipsecguide1.php...