CVE-2024-3458

Netentsec NS-ASG Application Security Gateway 6.3 contains a SQL injection vulnerability in the /admin/add_ikev2.php file, exploitable via manipulation of the TunnelId parameter. The issue allows remote attackers to inject SQL, with no authentication required per the description. Multiple sources...

CVE-2024-3457

The vulnerability CVE-2024-3457 affects Netentsec NS-ASG Application Security Gateway v6.3. The issue arises from a SQL injection in the parameter GroupId within the file /admin/config_ISCGroupNoCache.php, enabling remote attackers to manipulate input and potentially compromise data integrity, co...

CVE-2024-3456

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/configAnticrack.php. The manipulation of the argument GroupId leads to sql injection. The attack may be launched...

CVE-2024-3456

CVE-2024-3456 affects Netentsec NS-ASG Application Security Gateway 6.3. The vulnerability is a SQL injection in the file /admin/config_Anticrack.php triggered by manipulating the GroupId parameter. Attack may be conducted remotely and exploits have been disclosed publicly, per multiple sources. ...

CVE-2024-3455

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/addpostlogin.php. The manipulation of the argument SingleLoginId leads to sql injection. The attack can b...

CVE-2024-3445

A vulnerability was found in SourceCodester Laundry Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /karyawan/laporanfilter. The manipulation of the argument datakaryawan leads to sql injection. The attack can be initiated remotely. The...

CVE-2024-3455 Netentsec NS-ASG Application Security Gateway add_postlogin.php sql injection

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/addpostlogin.php. The manipulation of the argument SingleLoginId leads to sql injection. The attack can b...

CVE-2024-3455

Netentsec NS-ASG Application Security Gateway 6.3 contains a SQL injection vulnerability in the /admin/add_postlogin.php endpoint. The issue stems from improper handling of the SingleLoginId parameter, enabling remote attacker access without authentication. Public exploitation is noted in the sou...

CVE-2024-3445 SourceCodester Laundry Management System laporan_filter sql injection

A vulnerability was found in SourceCodester Laundry Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /karyawan/laporanfilter. The manipulation of the argument datakaryawan leads to sql injection. The attack can be initiated remotely. The...

CVE-2024-3445 SourceCodester Laundry Management System laporan_filter sql injection

A vulnerability was found in SourceCodester Laundry Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /karyawan/laporanfilter. The manipulation of the argument datakaryawan leads to sql injection. The attack can be initiated remotely. The...

CVE-2024-3445

CVE-2024-3445 affects SourceCodester Laundry Management System 1.0, with SQL injection in the /karyawan/laporan_filter file caused by manipulating the data_karyawan parameter. The vulnerability is exploitable remotely, and public disclosure is noted. Connected sources corroborate SQLi in data_kar...

CVE-2024-3442

A vulnerability classified as critical has been found in SourceCodester Prison Management System 1.0. This affects an unknown part of the file /Employee/deleteleave.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2024-3442

A vulnerability classified as critical has been found in SourceCodester Prison Management System 1.0. This affects an unknown part of the file /Employee/deleteleave.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2024-3443

A vulnerability classified as problematic was found in SourceCodester Prison Management System 1.0. This vulnerability affects unknown code of the file /Employee/applyleave.php. The manipulation of the argument txtstartdate/txtenddate leads to cross site scripting. The attack can be initiated...

CVE-2024-3444 Wangshen SecGate 3600 ?g=net_pro_keyword_import_save unrestricted upload

A vulnerability was found in Wangshen SecGate 3600 up to 20240408. It has been classified as critical. This affects an unknown part of the file /?g=netprokeywordimportsave. The manipulation of the argument reqfile leads to unrestricted upload. It is possible to initiate the attack remotely. The...

CVE-2024-3444 Wangshen SecGate 3600 ?g=net_pro_keyword_import_save unrestricted upload

A vulnerability was found in Wangshen SecGate 3600 up to 20240408. It has been classified as critical. This affects an unknown part of the file /?g=netprokeywordimportsave. The manipulation of the argument reqfile leads to unrestricted upload. It is possible to initiate the attack remotely. The...

CVE-2024-3443 SourceCodester Prison Management System apply_leave.php cross site scripting

A vulnerability classified as problematic was found in SourceCodester Prison Management System 1.0. This vulnerability affects unknown code of the file /Employee/applyleave.php. The manipulation of the argument txtstartdate/txtenddate leads to cross site scripting. The attack can be initiated...

CVE-2024-3442 SourceCodester Prison Management System delete_leave.php sql injection

A vulnerability classified as critical has been found in SourceCodester Prison Management System 1.0. This affects an unknown part of the file /Employee/deleteleave.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2024-3442 SourceCodester Prison Management System delete_leave.php sql injection

A vulnerability classified as critical has been found in SourceCodester Prison Management System 1.0. This affects an unknown part of the file /Employee/deleteleave.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2024-3442

CVE-2024-3442 affects SourceCodester Prison Management System 1.0, with the vulnerability located in /Employee/delete_leave.php. The issue enables SQL injection and can be triggered remotely, with public exploit disclosure noted. Multiple sources corroborate the flaw’s presence in the delete_leav...