CVE-2024-2646: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Netentsec NS-ASG Application Security Gateway 6.3. This vulnerability affects unknown code of the file /vpnweb/index.php?para=index. The manipulation of the argument checkVirtualSiteId leads to sql injection. The attack can be initiated remotely...

CVE-2023-7161: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in Netentsec NS-ASG Application Security Gateway 6.3.1. This affects an unknown part of the file index.php?para=index of the component Login. The manipulation of the argument checkVirtualSiteId leads to sql injection. It is possible to initiat...