3 matches found
CVE-2023-30805
The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an operating system command injection vulnerability. A remote and unauthenticated attacker can execute arbitrary commands by sending a crafted HTTP POST request to the /LogInOut.php endpoint. This is due to mishandling ...
CVE-2023-30805
CVE-2023-30805 - Sangfor NGAF Affected: Sangfor Next-Gen Application Firewall NGAF version 8.0.17. Vulnerability: An operating system command injection vulnerability exists when processing the value of the un parameter sent via an HTTP POST to /LogInOut.php . Root cause cited as mishandling of sh...
CVE-2023-30805 Sangfor Next-Gen Application Firewall Login Un Param Command Injection
The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an operating system command injection vulnerability. A remote and unauthenticated attacker can execute arbitrary commands by sending a crafted HTTP POST request to the /LogInOut.php endpoint. This is due to mishandling ...