CVE-2024-30864

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configISCGroupTimePolicy.php...

CVE-2024-30864: Improper Neutralization of Special Elements used in an SQL Command

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configISCGroupTimePolicy.php...

CVE-2024-30864

netentsec NS-ASG version 6.3 is vulnerable to SQL Injection due to the improper neutralization of special elements used in an SQL command. The vulnerability can be exploited via the /admin/config_ISCGroupTimePolicy.php API endpoint. Practical consequences include the potential for unauthorized da...

Netentsec ASG 网康应用安全网关在admin/config_ISCGroupTimePolicy.php等多处存在SQL注入漏洞

No description provided by source...