362 matches found
PT-2024-23636 · Netentsec · Netentsec Ns-Asg
Name of the Vulnerable Software and Affected Versions: netentsec NS-ASG version 6.3 Description: The issue concerns a SQL injection vulnerability. It can be exploited via the "/admin/config ISCGroupSSLCert.php" API endpoint. This could potentially allow for remote attacks. Recommendations: For...
CVE-2024-30863
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/history.php...
NetentSec NS-ASG 安全漏洞
NetentSec NS-ASG is an application security gateway from China NetentSec. A security vulnerability exists in NetentSec NS-ASG version 6.3, which originates from an SQL injection vulnerability in the /admin/edituserlogin.php file...
CVE-2024-30863
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/history.php...
CVE-2024-30866
Netentsec NS-ASG 6.3 is reported vulnerable to SQL Injection via the /3g/menu.php endpoint. The CVE description and connected records indicate the flaw originates from unsafe SQL handling in that API path, leading to potential exposure or alteration of data with low to moderate impact (CVSS v3.1:...
CVE-2024-30870
Summary: CVE-2024-30870 affects netentsec NS-ASG 6.3, with a SQL Injection vulnerability in the /admin/address_interpret.php endpoint. The vulnerability is classified with CVSS 3.1 base score 8.8 (HIGH) and is network-exposed with low attack complexity, requiring low privileges and no user intera...
CVE-2024-30861
NetentSec NS-ASG 6.3 is affected by CVE-2024-30861: an SQL Injection flaw in the endpoint /admin/configguide/ipsec_guide_1.php. The CVE record indicates a network-exposed vulnerability with CVSS v3.1: base score 5.3 (Medium), low confidentiality impact, no impact on integrity/availability, no use...
CVE-2024-30864
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configISCGroupTimePolicy.php...
CVE-2024-30861
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configguide/ipsecguide1.php...
CVE-2024-30870
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/addressinterpret.php...
CVE-2024-30865
CVE-2024-30865 concerns netentsec NS-ASG 6.3, where an SQL injection vulnerability exists in the web path /admin/edit_user_login.php . The vulnerability is documented across multiple sources (NVD, Red Hat, CNNVD, CVE listing) with a CVSS v3.1 base score of 9.8 (CRITICAL) , indicating high impact ...
CVE-2024-30859
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configISCGroupSSLCert.php...
NetentSec NS-ASG 安全漏洞
NetentSec NS-ASG is an application security gateway from China NetentSec. A security vulnerability exists in NetentSec NS-ASG version 6.3, which originates from an SQL injection vulnerability in the /3g/index.php file...
NetentSec NS-ASG 安全漏洞
NetentSec NS-ASG is an application security gateway from China NetentSec. A security vulnerability exists in NetentSec NS-ASG version 6.3, which originates from an SQL injection vulnerability in the /admin/exportexceluser.php file...
CVE-2024-30872
CVE-2024-30872 affects NetentSec NS-ASG 6.3. The vulnerability is a SQL Injection in the /include/authrp.php endpoint. Documented impact per CVSS: confidentiality impact NONE, integrity impact LOW, availability impact LOW. Exploitation details or patch information are not provided in the connecte...
PT-2024-23641 · Netentsec · Netentsec Ns-Asg
Name of the Vulnerable Software and Affected Versions: netentsec NS-ASG version 6.3 Description: The issue is related to SQL Injection, which can be exploited via the "/WebPages/history.php" API endpoint. This allows for potential unauthorized access or manipulation of data. Recommendations: For...
CVE-2024-30872
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /include/authrp.php...
CVE-2024-30865
netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edituserlogin.php...
CVE-2024-30863
CVE-2024-30863 affects netentsec NS-ASG 6.3. The vulnerability is an SQL injection in the /WebPages/history.php endpoint. CVSS 3.1 base score 6.3 (Network, High attack complexity, Low privileges, No user interaction). Impact is integrity loss, with confidentiality/availability not affected per th...