1150 matches found
CVE-2024-30871
netentsec NS-ASG 6.3 is vulnerable to an SQL Injection flaw within the /WebPages/applyhardware.php API endpoint. This vulnerability allows for the improper neutralization of special elements used in SQL commands. The documents do not provide information regarding an exploit in the wild or a speci...
CVE-2024-30871: Improper Neutralization of Special Elements used in an SQL Command
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/applyhardware.php...
CVE-2024-30864
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configISCGroupTimePolicy.php...
CVE-2024-30862
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/index.php...
CVE-2024-30868
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/addgetlogin.php...
CVE-2024-30859
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configISCGroupSSLCert.php...
CVE-2024-30860
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/exportexceluser.php...
CVE-2024-30871
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/applyhardware.php...
CVE-2024-30865
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edituserlogin.php...
CVE-2024-30870
The netentsec NS-ASG 6.3 application security gateway is vulnerable to an SQL Injection vulnerability (CWE-89) located in the /admin/address_interpret.php file. An attacker can exploit this endpoint to execute unauthorized SQL commands, potentially leading to a total impact on confidentiality, in...
CVE-2024-30858
The netentsec NS-ASG application security gateway, version 6.3 , is vulnerable to SQL Injection via the /admin/edit_fire_wall.php API endpoint. This vulnerability allows an attacker to interfere with the backend database, potentially leading to unauthorized data access or manipulation. While spec...
CVE-2024-30859
netentsec NS-ASG version 6.3 is vulnerable to an SQL Injection vulnerability located in the /admin/config_ISCGroupSSLCert.php API endpoint. This flaw allows for potential remote attacks by exploiting improper neutralization of special elements used in SQL commands. To mitigate this risk, it is re...
CVE-2024-30860
The netentsec NS-ASG 6.3 application security gateway is vulnerable to SQL Injection due to improper neutralization of special elements used in an SQL command. This vulnerability is accessible via the /admin/export_excel_user.php API endpoint. Exploitation could allow an attacker to perform unaut...
CVE-2024-30861
The netentsec NS-ASG version 6.3 application security gateway is vulnerable to an SQL Injection vulnerability (CWE-89). The flaw exists within the "/admin/configguide/ipsec_guide_1.php" API endpoint, which can be exploited to interact with the underlying database. There is currently no official p...
CVE-2024-30867
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/editvirtualsiteinfo.php...
CVE-2024-30859
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configISCGroupSSLCert.php...
CVE-2024-30860
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/exportexceluser.php...
CVE-2024-30870
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/addressinterpret.php...
PT-2024-23638 · Netentsec · Netentsec Ns-Asg
Name of the Vulnerable Software and Affected Versions: netentsec NS-ASG version 6.3 Description: The issue is related to SQL Injection. It can be exploited via the "/admin/export excel user.php" API endpoint. Recommendations: For netentsec NS-ASG version 6.3, consider restricting access to the...