CVE-2024-30867

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/editvirtualsiteinfo.php...

PT-2024-23645 · Netentsec · Netentsec Ns-Asg

Name of the Vulnerable Software and Affected Versions: netentsec NS-ASG version 6.3 Description: The issue is related to SQL Injection, which can be exploited via the /admin/edit virtual site info.php API endpoint. Recommendations: For netentsec NS-ASG version 6.3, consider restricting access to...

NetentSec NS-ASG 安全漏洞

NetentSec NS-ASG is an application security gateway from China NetentSec. A security vulnerability exists in NetentSec NS-ASG version 6.3, which originates from an SQL injection vulnerability in the /admin/editvirtualsiteinfo.php file...

PT-2024-21383 · Netentsec · Netentsec Ns-Asg Application Security Gateway

Name of the Vulnerable Software and Affected Versions: Netentsec NS-ASG Application Security Gateway version 6.3 Description: A critical issue was found in the Netentsec NS-ASG Application Security Gateway. This issue affects the file /vpnweb/index.php?para=index and allows for SQL injection...

The vulnerability of the index.php?para=index component of the Application Security Gateway NS-ASG Netentsec allows attackers to execute arbitrary SQL queries.

The vulnerability of the index.php?para=index component of the application security gateway NS-ASG Netentsec is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries using the...