362 matches found
PT-2024-23650 · Netentsec · Netentsec Ns-Asg
Name of the Vulnerable Software and Affected Versions: netentsec NS-ASG version 6.3 Description: The issue is related to SQL Injection. It can be exploited via the "/include/authrp.php" API endpoint. Recommendations: For netentsec NS-ASG version 6.3, consider restricting access to the...
CVE-2024-30867
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/editvirtualsiteinfo.php...
CVE-2024-30861
NetentSec NS-ASG 6.3 is affected by CVE-2024-30861: an SQL Injection flaw in the endpoint /admin/configguide/ipsec_guide_1.php. The CVE record indicates a network-exposed vulnerability with CVSS v3.1: base score 5.3 (Medium), low confidentiality impact, no impact on integrity/availability, no use...
CVE-2024-30866
Netentsec NS-ASG 6.3 is reported vulnerable to SQL Injection via the /3g/menu.php endpoint. The CVE description and connected records indicate the flaw originates from unsafe SQL handling in that API path, leading to potential exposure or alteration of data with low to moderate impact (CVSS v3.1:...
CVE-2024-30867
CVE-2024-30867 affects netentsec NS-ASG 6.3. The vulnerability is a SQL injection in the /admin/edit_virtual_site_info.php endpoint, with CVSS v3.1 base score 9.8 (CRITICAL). Exposed via NETWORK, no user interaction required, privileges none. Root cause: improper handling of database queries enab...
CVE-2024-30862
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/index.php...
PT-2024-23636 · Netentsec · Netentsec Ns-Asg
Name of the Vulnerable Software and Affected Versions: netentsec NS-ASG version 6.3 Description: The issue concerns a SQL injection vulnerability. It can be exploited via the "/admin/config ISCGroupSSLCert.php" API endpoint. This could potentially allow for remote attacks. Recommendations: For...
CVE-2024-30864
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configISCGroupTimePolicy.php...
PT-2024-23642 · Netentsec · Netentsec Ns-Asg
Name of the Vulnerable Software and Affected Versions: netentsec NS-ASG version 6.3 Description: The issue concerns SQL Injection, which can be exploited via the "/admin/config ISCGroupTimePolicy.php" API endpoint. Recommendations: For netentsec NS-ASG version 6.3, consider restricting access to...
PT-2024-23640 · Netentsec · Netentsec Ns-Asg
Name of the Vulnerable Software and Affected Versions: netentsec NS-ASG version 6.3 Description: The issue is related to SQL Injection. It can be exploited via the "/3g/index.php" API endpoint. Recommendations: For netentsec NS-ASG version 6.3, consider restricting access to the "/3g/index.php"...
CVE-2024-30859
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configISCGroupSSLCert.php...
CVE-2024-30870
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/addressinterpret.php...
CVE-2024-30872
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /include/authrp.php...
NetentSec NS-ASG 安全漏洞
NetentSec NS-ASG is an application security gateway from China NetentSec. A security vulnerability exists in NetentSec NS-ASG version 6.3, which originates from an SQL injection vulnerability in the /admin/configISCGroupTimePolicy.php file...
CVE-2024-30863
CVE-2024-30863 affects netentsec NS-ASG 6.3. The vulnerability is an SQL injection in the /WebPages/history.php endpoint. CVSS 3.1 base score 6.3 (Network, High attack complexity, Low privileges, No user interaction). Impact is integrity loss, with confidentiality/availability not affected per th...
CVE-2024-30865
CVE-2024-30865 concerns netentsec NS-ASG 6.3, where an SQL injection vulnerability exists in the web path /admin/edit_user_login.php . The vulnerability is documented across multiple sources (NVD, Red Hat, CNNVD, CVE listing) with a CVSS v3.1 base score of 9.8 (CRITICAL) , indicating high impact ...
CVE-2024-30872
CVE-2024-30872 affects NetentSec NS-ASG 6.3. The vulnerability is a SQL Injection in the /include/authrp.php endpoint. Documented impact per CVSS: confidentiality impact NONE, integrity impact LOW, availability impact LOW. Exploitation details or patch information are not provided in the connecte...
PT-2024-23641 · Netentsec · Netentsec Ns-Asg
Name of the Vulnerable Software and Affected Versions: netentsec NS-ASG version 6.3 Description: The issue is related to SQL Injection, which can be exploited via the "/WebPages/history.php" API endpoint. This allows for potential unauthorized access or manipulation of data. Recommendations: For...