CVE-2024-30868

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/addgetlogin.php...

CVE-2024-30858

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/editfirewall.php...

CVE-2024-30859

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configISCGroupSSLCert.php...

CVE-2024-30860

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/exportexceluser.php...

CVE-2024-30861

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configguide/ipsecguide1.php...

CVE-2024-30862

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/index.php...

CVE-2024-30863

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/history.php...

CVE-2024-30864

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configISCGroupTimePolicy.php...

CVE-2024-30865

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edituserlogin.php...

CVE-2024-30866

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/menu.php...

CVE-2024-30867

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/editvirtualsiteinfo.php...

CVE-2024-30868

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/addgetlogin.php...

CVE-2024-30870

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/addressinterpret.php...

CVE-2024-30871

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/applyhardware.php...

CVE-2024-30872

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /include/authrp.php...

PT-2024-23643

Name of the Vulnerable Software and Affected Versions netentsec NS-ASG version 6.3 Description The issue is related to SQL Injection, which can be exploited via the "/admin/edit user login.php" API endpoint. Recommendations For netentsec NS-ASG version 6.3, consider restricting access to the...

CVE-2024-30871: Improper Neutralization of Special Elements used in an SQL Command

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/applyhardware.php...

CVE-2024-30872: Improper Neutralization of Special Elements used in an SQL Command

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /include/authrp.php...

CVE-2024-30868: Improper Control of Generation of Code

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/addgetlogin.php...

CVE-2024-30863: Improper Neutralization of Special Elements used in an SQL Command

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/history.php...