CVE-2024-28521

A SQL Injection vulnerability exists in Netcome NS-ASG Application Security Gateway v.6.3.1 . The flaw is located in the loginid parameter of the /singlelogin.php component, where a lack of proper neutralization of special elements used in SQL commands allows an attacker to inject crafted scripts...

CVE-2023-7161

CVE-2023-7161 affects Netentsec NS-ASG Application Security Gateway 6.3.1. Root cause: manipulation of the check_VirtualSiteId argument in index.php?para=index enables SQL injection. Attack is remote‑possible, and the exploit has been disclosed publicly. No remediation details are provided in the...