416 matches found
CVE-2024-30864
The netentsec NS-ASG version 6.3 is vulnerable to SQL Injection through the /admin/config_ISCGroupTimePolicy.php API endpoint. This vulnerability is caused by the improper neutralization of special elements used in an SQL command. Practical consequences include the potential for unauthorized data...
CVE-2024-30861: Improper Neutralization of Special Elements used in an SQL Command
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configguide/ipsecguide1.php...
CVE-2024-30862: Improper Neutralization of Special Elements used in an SQL Command
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/index.php...
CVE-2024-30864: Improper Neutralization of Special Elements used in an SQL Command
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configISCGroupTimePolicy.php...
CVE-2024-30863: Improper Neutralization of Special Elements used in an SQL Command
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/history.php...
CVE-2024-30865: Improper Neutralization of Special Elements used in an SQL Command
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edituserlogin.php...
CVE-2024-30870: Improper Neutralization of Special Elements used in an SQL Command
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/addressinterpret.php...
PT-2024-23649 · Netentsec · Netentsec Ns-Asg
Name of the Vulnerable Software and Affected Versions: netentsec NS-ASG version 6.3 Description: The issue is related to SQL Injection. It can be exploited via the "/WebPages/applyhardware.php" API endpoint. Recommendations: For netentsec NS-ASG version 6.3, consider restricting access to the...
CVE-2024-30866
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/menu.php...
CVE-2024-30868
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/addgetlogin.php...
CVE-2024-30860
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/exportexceluser.php...
CVE-2024-30861
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configguide/ipsecguide1.php...
CVE-2024-30865
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edituserlogin.php...
CVE-2024-30861
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configguide/ipsecguide1.php...
CVE-2024-30859
netentsec NS-ASG version 6.3 is vulnerable to an SQL Injection vulnerability located in the /admin/config_ISCGroupSSLCert.php API endpoint. This flaw allows for potential remote attacks by exploiting improper neutralization of special elements used in SQL commands. To mitigate this risk, it is re...
NetentSec NS-ASG security vulnerability
NetentSec NS-ASG is an application security gateway from China NetentSec. A security vulnerability exists in NetentSec NS-ASG version 6.3, which originates from an SQL injection vulnerability in the /3g/menu.php file...
CVE-2024-30871: Improper Neutralization of Special Elements used in an SQL Command
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/applyhardware.php...
CVE-2024-30859
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configISCGroupSSLCert.php...
PT-2024-23642 · Netentsec · Netentsec Ns-Asg
Name of the Vulnerable Software and Affected Versions: netentsec NS-ASG version 6.3 Description: The issue concerns SQL Injection, which can be exploited via the "/admin/config ISCGroupTimePolicy.php" API endpoint. Recommendations: For netentsec NS-ASG version 6.3, consider restricting access to...