CVE-2024-28521

A SQL Injection vulnerability exists in Netcome NS-ASG Application Security Gateway v.6.3.1 . The flaw is located in the loginid parameter of the /singlelogin.php component, where a lack of proper neutralization of special elements used in SQL commands allows an attacker to inject crafted scripts...