CVE-2024-30865

The netentsec NS-ASG application security gateway, specifically version 6.3 , is vulnerable to an SQL Injection flaw. The vulnerability exists within the /admin/edit_user_login.php file, which stems from the improper neutralization of special elements used in an SQL command. Successful exploitati...

CVE-2024-30866

Netentsec NS-ASG version 6.3 is susceptible to an SQL Injection vulnerability within the /3g/menu.php API endpoint. This flaw allows for the improper neutralization of special elements used in SQL commands. As a mitigation, it is recommended to restrict access to the affected endpoint until a for...

CVE-2024-30862

netentsec NS-ASG version 6.3 is vulnerable to an SQL Injection vulnerability. The flaw originates from the /3g/index.php API endpoint, which fails to properly neutralize special elements used in SQL commands. This vulnerability could allow an attacker to execute unauthorized SQL queries. While no...

CVE-2024-30863

Netentsec NS-ASG version 6.3 is vulnerable to SQL Injection due to improper neutralization of special elements in the "/WebPages/history.php" API endpoint. This vulnerability allows for potential unauthorized access or manipulation of data. As a temporary workaround, it is recommended to restrict...

CVE-2024-30867

The application security gateway netentsec NS-ASG version 6.3 is vulnerable to SQL Injection via the /admin/edit_virtual_site_info.php API endpoint. This vulnerability allows an attacker to interfere with database queries, potentially leading to unauthorized data access or modification. As a work...

PT-2024-23644 · Netentsec · Netentsec Ns-Asg

Name of the Vulnerable Software and Affected Versions: netentsec NS-ASG version 6.3 Description: The issue is related to SQL Injection. It can be exploited via the "/3g/menu.php" API endpoint. Recommendations: For netentsec NS-ASG version 6.3, consider restricting access to the "/3g/menu.php"...

CVE-2024-30872

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /include/authrp.php...

CVE-2024-30871

netentsec NS-ASG 6.3 is vulnerable to an SQL Injection flaw within the /WebPages/applyhardware.php API endpoint. This vulnerability allows for the improper neutralization of special elements used in SQL commands. The documents do not provide information regarding an exploit in the wild or a speci...

CVE-2024-30868: Improper Control of Generation of Code

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/addgetlogin.php...

CVE-2024-30872: Improper Neutralization of Special Elements used in an SQL Command

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /include/authrp.php...

PT-2024-23636 · Netentsec · Netentsec Ns-Asg

Name of the Vulnerable Software and Affected Versions: netentsec NS-ASG version 6.3 Description: The issue concerns a SQL injection vulnerability. It can be exploited via the "/admin/config ISCGroupSSLCert.php" API endpoint. This could potentially allow for remote attacks. Recommendations: For...

CVE-2024-30872

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /include/authrp.php...

CVE-2024-30859: Improper Neutralization of Special Elements used in an SQL Command

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configISCGroupSSLCert.php...

PT-2024-23648 · Netentsec · Netentsec Ns-Asg

Name of the Vulnerable Software and Affected Versions: netentsec NS-ASG version 6.3 Description: The issue is related to SQL Injection, which can be exploited via the "/admin/address interpret.php" API endpoint. There is no information provided about the estimated number of potentially affected...

CVE-2024-30871

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/applyhardware.php...

CVE-2024-30864

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configISCGroupTimePolicy.php...

PT-2024-23643

Name of the Vulnerable Software and Affected Versions netentsec NS-ASG version 6.3 Description The issue is related to SQL Injection, which can be exploited via the "/admin/edit user login.php" API endpoint. Recommendations For netentsec NS-ASG version 6.3, consider restricting access to the...

CVE-2024-30868

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/addgetlogin.php...

CVE-2024-30868

The netentsec NS-ASG 6.3 application security gateway is vulnerable to an SQL Injection flaw. The vulnerability exists in the /admin/add_getlogin.php API endpoint, which can be exploited to interact with the underlying database. This flaw is classified under CWE-94 (Improper Control of Generation...

CVE-2024-30872

The netentsec NS-ASG 6.3 application security gateway is vulnerable to SQL Injection due to improper neutralization of special elements in the /include/authrp.php API endpoint. An attacker could exploit this flaw to execute unauthorized SQL commands. As a mitigation, it is recommended to restrict...