CVE-2024-30862: Improper Neutralization of Special Elements used in an SQL Command

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/index.php...

CVE-2024-30870

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/addressinterpret.php...

CVE-2024-30870

The netentsec NS-ASG 6.3 application security gateway is vulnerable to an SQL Injection vulnerability (CWE-89) located in the /admin/address_interpret.php file. An attacker can exploit this endpoint to execute unauthorized SQL commands, potentially leading to a total impact on confidentiality, in...

CVE-2024-30866: Improper Neutralization of Special Elements used in an SQL Command

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/menu.php...

CVE-2024-30865

The netentsec NS-ASG application security gateway, specifically version 6.3 , is vulnerable to an SQL Injection flaw. The vulnerability exists within the /admin/edit_user_login.php file, which stems from the improper neutralization of special elements used in an SQL command. Successful exploitati...

CVE-2024-30862

netentsec NS-ASG version 6.3 is vulnerable to an SQL Injection vulnerability. The flaw originates from the /3g/index.php API endpoint, which fails to properly neutralize special elements used in SQL commands. This vulnerability could allow an attacker to execute unauthorized SQL queries. While no...

CVE-2024-30866

Netentsec NS-ASG version 6.3 is susceptible to an SQL Injection vulnerability within the /3g/menu.php API endpoint. This flaw allows for the improper neutralization of special elements used in SQL commands. As a mitigation, it is recommended to restrict access to the affected endpoint until a for...

NetentSec NS-ASG 安全漏洞

NetentSec NS-ASG is an application security gateway from China NetentSec. A security vulnerability exists in NetentSec NS-ASG version 6.3, which originates from an SQL injection vulnerability in the /WebPages/applyhardware.php file...

CVE-2024-30861

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configguide/ipsecguide1.php...

CVE-2024-30861

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configguide/ipsecguide1.php...

NetentSec NS-ASG 安全漏洞

NetentSec NS-ASG is an application security gateway from China NetentSec. A security vulnerability exists in NetentSec NS-ASG version 6.3, which originates from an SQL injection vulnerability in the file /admin/configguide/ipsecguide1.php...

CVE-2024-30868

The netentsec NS-ASG 6.3 application security gateway is vulnerable to an SQL Injection flaw. The vulnerability exists in the /admin/add_getlogin.php API endpoint, which can be exploited to interact with the underlying database. This flaw is classified under CWE-94 (Improper Control of Generation...

CVE-2024-30870: Improper Neutralization of Special Elements used in an SQL Command

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/addressinterpret.php...

CVE-2024-30870

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/addressinterpret.php...

CVE-2024-30858

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/editfirewall.php...

CVE-2024-30871

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/applyhardware.php...

NetentSec NS-ASG 安全漏洞

NetentSec NS-ASG is an application security gateway from China NetentSec. A security vulnerability exists in NetentSec NS-ASG version 6.3, which originates from an SQL injection vulnerability in the /admin/addressinterpret.php file...

CVE-2024-30872

The netentsec NS-ASG 6.3 application security gateway is vulnerable to SQL Injection due to improper neutralization of special elements in the /include/authrp.php API endpoint. An attacker could exploit this flaw to execute unauthorized SQL commands. As a mitigation, it is recommended to restrict...

CVE-2024-30860

The netentsec NS-ASG 6.3 application security gateway is vulnerable to SQL Injection due to improper neutralization of special elements used in an SQL command. This vulnerability is accessible via the /admin/export_excel_user.php API endpoint. Exploitation could allow an attacker to perform unaut...

CVE-2024-30861

The netentsec NS-ASG version 6.3 application security gateway is vulnerable to an SQL Injection vulnerability (CWE-89). The flaw exists within the "/admin/configguide/ipsec_guide_1.php" API endpoint, which can be exploited to interact with the underlying database. There is currently no official p...