Lucene search
+L

11 matches found

CNNVD
CNNVD
•added 2023/10/27 12:00 a.m.•16 views

Netcon NS-ASG Security Vulnerability

Netcon NS-ASG is an application security gateway from China Netcon Technology Netcon. A security vulnerability exists in Netentsec NS-ASG Application Security Gateway version 6.3, which originates from the parameter SessionId in the file /admin/listonlineuser.php that can lead to SQL injection...

8.8CVSS7.4AI score0.00656EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/10/26 12:00 a.m.•12 views

Netcon NS-ASG SQL Injection Vulnerability

Netcon NS-ASG is an application security gateway from China Netcon Technology Netcon. A security vulnerability exists in Netcon NS-ASG version 6.3, which originates from some unknown functions in /protocol/firewall/uploadfirewall.php that cause SQL injection via the parameter messagecontent...

9.8CVSS8AI score0.00671EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/10/26 12:00 a.m.•14 views

Netcon NS-ASG SQL Injection Vulnerability

Netcon NS-ASG is an application security gateway from China Netcon Technology Netcon. A security vulnerability exists in Netcon NS-ASG version 6.3, which originates from some unknown functions in /protocol/firewall/addaddressinterpret.phpp that cause SQL injection via the parameter messagecontent...

7.5CVSS8AI score0.00551EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2023/07/20 7:00 p.m.•40 views

CVE-2023-3792 Beijing Netcon NS-ASG test_status.php direct request

A vulnerability was found in Beijing Netcon NS-ASG 6.3. It has been classified as problematic. This affects an unknown part of the file /admin/teststatus.php. The manipulation leads to direct request. The exploit has been disclosed to the public and may be used. The associated identifier of this...

4.3CVSS6.7AI score0.00728EPSS
SaveExploits1References3
CVE
CVE
•added 2023/07/20 7:00 p.m.•84 views

CVE-2023-3792

CVE-2023-3792 affects Beijing Netcon NS-ASG 6.3. The vulnerability is in an unknown part of the file /admin/test_status.php, where manipulation leads to a direct request. The exploit has been disclosed publicly, but the provided documents do not specify the exact vector, affected versions beyond ...

6.5CVSS5.4AI score0.00728EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/20 12:00 a.m.•1 views

CVE-2023-3792: Direct Request

A vulnerability was found in Beijing Netcon NS-ASG 6.3. It has been classified as problematic. This affects an unknown part of the file /admin/teststatus.php. The manipulation leads to direct request. The exploit has been disclosed to the public and may be used. The associated identifier of this...

6.5CVSS5.4AI score0.00728EPSS
SaveExploits1References2
Prion
Prion
•added 2023/05/05 2:15 p.m.•27 views

Sql injection

Beijing Netcon NS-ASG Application Security Gateway v6.3 is vulnerable to SQL Injection via TunnelId that allows access to sensitive information...

5CVSS7.9AI score0.00555EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2023/05/05 12:00 a.m.•18 views

Netcon NS-ASG SQL注入漏洞

Netcon NS-ASG is an application security gateway from China Netcon Technology Netcon. A security vulnerability exists in Netcon NS-ASG v6.3, which originates from an SQL injection vulnerability in the component /admin/addikev2.php...

9.8CVSS8.6AI score0.00626EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/05/05 12:00 a.m.•16 views

Netcon NS-ASG SQL注入漏洞

Netcon NS-ASG is an application security gateway from China Netcon Technology Netcon. A security vulnerability exists in Netcon NS-ASG v6.3, which originates from allowing access to sensitive information via TunnelId, leading to SQL injection attacks...

7.5CVSS7.5AI score0.00555EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/05/05 12:00 a.m.•2 views

PT-2023-22600

Name of the Vulnerable Software and Affected Versions Beijing Netcon NS-ASG Application Security Gateway version 6.3 Description The issue allows access to sensitive information via SQL Injection, specifically through the TunnelId. This enables unauthorized access to sensitive data. Recommendatio...

7.5CVSS0.00555EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/05 12:00 a.m.•1 views

CVE-2023-30243: Improper Neutralization of Special Elements used in an SQL Command

Beijing Netcon NS-ASG Application Security Gateway v6.3 is vulnerable to SQL Injection via TunnelId that allows access to sensitive information...

7.5CVSS5.8AI score0.00555EPSS
SaveExploits0References2
Rows per page
Query Builder