CVE-2024-3456

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/configAnticrack.php. The manipulation of the argument GroupId leads to sql injection. The attack may be launched...

CVE-2024-3456 Netentsec NS-ASG Application Security Gateway config_Anticrack.php sql injection

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/configAnticrack.php. The manipulation of the argument GroupId leads to sql injection. The attack may be launched...

CVE-2024-3455

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/addpostlogin.php. The manipulation of the argument SingleLoginId leads to sql injection. The attack can b...

CVE-2024-3455

Netentsec NS-ASG Application Security Gateway 6.3 contains a SQL injection vulnerability in the /admin/add_postlogin.php endpoint. The issue stems from improper handling of the SingleLoginId parameter, enabling remote attacker access without authentication. Public exploitation is noted in the sou...

CVE-2024-3455 Netentsec NS-ASG Application Security Gateway add_postlogin.php sql injection

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/addpostlogin.php. The manipulation of the argument SingleLoginId leads to sql injection. The attack can b...

CVE-2024-30867

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/editvirtualsiteinfo.php...

CVE-2024-30862

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/index.php...

CVE-2024-30861

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configguide/ipsecguide1.php...

CVE-2024-30859

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configISCGroupSSLCert.php...

CVE-2024-30866

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/menu.php...

CVE-2024-30864

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configISCGroupTimePolicy.php...

CVE-2024-30872

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /include/authrp.php...

CVE-2024-30872

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /include/authrp.php...

CVE-2024-30871

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/applyhardware.php...

CVE-2024-30871

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/applyhardware.php...

CVE-2024-30864

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configISCGroupTimePolicy.php...

CVE-2024-30861

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configguide/ipsecguide1.php...

CVE-2024-30860

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/exportexceluser.php...

CVE-2024-30867

CVE-2024-30867 affects netentsec NS-ASG 6.3. The vulnerability is a SQL injection in the /admin/edit_virtual_site_info.php endpoint, with CVSS v3.1 base score 9.8 (CRITICAL). Exposed via NETWORK, no user interaction required, privileges none. Root cause: improper handling of database queries enab...

PT-2024-23636 · Netentsec · Netentsec Ns-Asg

Name of the Vulnerable Software and Affected Versions: netentsec NS-ASG version 6.3 Description: The issue concerns a SQL injection vulnerability. It can be exploited via the "/admin/config ISCGroupSSLCert.php" API endpoint. This could potentially allow for remote attacks. Recommendations: For...