CVE-2024-30864

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configISCGroupTimePolicy.php...

CVE-2024-30864: Improper Neutralization of Special Elements used in an SQL Command

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configISCGroupTimePolicy.php...

CVE-2024-30864

The netentsec NS-ASG version 6.3 is vulnerable to SQL Injection through the /admin/config_ISCGroupTimePolicy.php API endpoint. This vulnerability is caused by the improper neutralization of special elements used in an SQL command. Practical consequences include the potential for unauthorized data...

Netentsec ASG 网康应用安全网关在admin/config_ISCGroupTimePolicy.php等多处存在SQL注入漏洞

No description provided by source...