CVE-2024-30872

The netentsec NS-ASG 6.3 application security gateway is vulnerable to SQL Injection due to improper neutralization of special elements in the /include/authrp.php API endpoint. An attacker could exploit this flaw to execute unauthorized SQL commands. As a mitigation, it is recommended to restrict...

CVE-2024-30860

The netentsec NS-ASG 6.3 application security gateway is vulnerable to SQL Injection due to improper neutralization of special elements used in an SQL command. This vulnerability is accessible via the /admin/export_excel_user.php API endpoint. Exploitation could allow an attacker to perform unaut...

CVE-2024-30861

The netentsec NS-ASG version 6.3 application security gateway is vulnerable to an SQL Injection vulnerability (CWE-89). The flaw exists within the "/admin/configguide/ipsec_guide_1.php" API endpoint, which can be exploited to interact with the underlying database. There is currently no official p...

CVE-2024-30858

The netentsec NS-ASG application security gateway, version 6.3 , is vulnerable to SQL Injection via the /admin/edit_fire_wall.php API endpoint. This vulnerability allows an attacker to interfere with the backend database, potentially leading to unauthorized data access or manipulation. While spec...

CVE-2024-30866

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/menu.php...

CVE-2024-30866

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/menu.php...

CVE-2024-30867

The application security gateway netentsec NS-ASG version 6.3 is vulnerable to SQL Injection via the /admin/edit_virtual_site_info.php API endpoint. This vulnerability allows an attacker to interfere with database queries, potentially leading to unauthorized data access or modification. As a work...

PT-2024-23636 · Netentsec · Netentsec Ns-Asg

Name of the Vulnerable Software and Affected Versions: netentsec NS-ASG version 6.3 Description: The issue concerns a SQL injection vulnerability. It can be exploited via the "/admin/config ISCGroupSSLCert.php" API endpoint. This could potentially allow for remote attacks. Recommendations: For...

CVE-2024-30864

The netentsec NS-ASG version 6.3 is vulnerable to SQL Injection through the /admin/config_ISCGroupTimePolicy.php API endpoint. This vulnerability is caused by the improper neutralization of special elements used in an SQL command. Practical consequences include the potential for unauthorized data...

CVE-2024-30868

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/addgetlogin.php...

CVE-2024-30864

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configISCGroupTimePolicy.php...

CVE-2024-30863

Netentsec NS-ASG version 6.3 is vulnerable to SQL Injection due to improper neutralization of special elements in the "/WebPages/history.php" API endpoint. This vulnerability allows for potential unauthorized access or manipulation of data. As a temporary workaround, it is recommended to restrict...

CVE-2024-30868

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/addgetlogin.php...

PT-2024-23643

Name of the Vulnerable Software and Affected Versions netentsec NS-ASG version 6.3 Description The issue is related to SQL Injection, which can be exploited via the "/admin/edit user login.php" API endpoint. Recommendations For netentsec NS-ASG version 6.3, consider restricting access to the...

CVE-2024-3041

A vulnerability has been found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. This vulnerability affects unknown code of the file /protocol/log/listloginfo.php. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2024-3041

A vulnerability has been found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. This vulnerability affects unknown code of the file /protocol/log/listloginfo.php. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2024-3040

A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /admin/listcrlconf. The manipulation of the argument CRLId leads to sql injection. It is possible to initiate the attack remotely. The exploi...

CVE-2024-3041 Netentsec NS-ASG Application Security Gateway listloginfo.php sql injection

A vulnerability has been found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. This vulnerability affects unknown code of the file /protocol/log/listloginfo.php. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2024-3041 Netentsec NS-ASG Application Security Gateway listloginfo.php sql injection

A vulnerability has been found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. This vulnerability affects unknown code of the file /protocol/log/listloginfo.php. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2024-3040 Netentsec NS-ASG Application Security Gateway list_crl_conf sql injection

A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /admin/listcrlconf. The manipulation of the argument CRLId leads to sql injection. It is possible to initiate the attack remotely. The exploi...