342 matches found
CVE-2024-30871
netentsec NS-ASG 6.3 is vulnerable to an SQL Injection flaw within the /WebPages/applyhardware.php API endpoint. This vulnerability allows for the improper neutralization of special elements used in SQL commands. The documents do not provide information regarding an exploit in the wild or a speci...
CVE-2024-30859
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configISCGroupSSLCert.php...
CVE-2024-30860
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/exportexceluser.php...
CVE-2024-30859
netentsec NS-ASG version 6.3 is vulnerable to an SQL Injection vulnerability located in the /admin/config_ISCGroupSSLCert.php API endpoint. This flaw allows for potential remote attacks by exploiting improper neutralization of special elements used in SQL commands. To mitigate this risk, it is re...
CVE-2024-30867
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/editvirtualsiteinfo.php...
CVE-2024-30859
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configISCGroupSSLCert.php...
CVE-2024-30860
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/exportexceluser.php...
PT-2024-23638 · Netentsec · Netentsec Ns-Asg
Name of the Vulnerable Software and Affected Versions: netentsec NS-ASG version 6.3 Description: The issue is related to SQL Injection. It can be exploited via the "/admin/export excel user.php" API endpoint. Recommendations: For netentsec NS-ASG version 6.3, consider restricting access to the...
CVE-2024-30858
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/editfirewall.php...
NetentSec NS-ASG 安全漏洞
NetentSec NS-ASG is an application security gateway from China NetentSec. A security vulnerability exists in NetentSec NS-ASG version 6.3, which originates from an SQL injection vulnerability in the /WebPages/applyhardware.php file...
CVE-2024-30871
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/applyhardware.php...
CVE-2024-30870
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/addressinterpret.php...
CVE-2024-30870
The netentsec NS-ASG 6.3 application security gateway is vulnerable to an SQL Injection vulnerability (CWE-89) located in the /admin/address_interpret.php file. An attacker can exploit this endpoint to execute unauthorized SQL commands, potentially leading to a total impact on confidentiality, in...
CVE-2024-30870
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/addressinterpret.php...
CVE-2024-30865
The netentsec NS-ASG application security gateway, specifically version 6.3 , is vulnerable to an SQL Injection flaw. The vulnerability exists within the /admin/edit_user_login.php file, which stems from the improper neutralization of special elements used in an SQL command. Successful exploitati...
CVE-2024-30866
Netentsec NS-ASG version 6.3 is susceptible to an SQL Injection vulnerability within the /3g/menu.php API endpoint. This flaw allows for the improper neutralization of special elements used in SQL commands. As a mitigation, it is recommended to restrict access to the affected endpoint until a for...
CVE-2024-30872: Improper Neutralization of Special Elements used in an SQL Command
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /include/authrp.php...
CVE-2024-30867: Improper Neutralization of Special Elements used in an SQL Command
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/editvirtualsiteinfo.php...
CVE-2024-30861: Improper Neutralization of Special Elements used in an SQL Command
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configguide/ipsecguide1.php...