Netentsec Ns-Asg Application Security Gateway vulnerabilities

CVE-2024-3455 [CRITICAL] CWE-89 CVE-2024-3455: A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been declared A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/add_postlogin.php. The manipulation of the argument SingleLoginId leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to

CVE-2023-7161 [CRITICAL] CWE-89 CVE-2023-7161: A vulnerability classified as critical has been found in Netentsec NS-ASG Application Security Gatew A vulnerability classified as critical has been found in Netentsec NS-ASG Application Security Gateway 6.3.1. This affects an unknown part of the file index.php?para=index of the component Login. The manipulation of the argument check_VirtualSiteId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed

CVE-2023-5700 [CRITICAL] CWE-89 CVE-2023-5700: A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Securit A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. Affected is an unknown function of the file /protocol/iscgwtunnel/uploadiscgwrouteconf.php. The manipulation of the argument GWLinkId leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-243138 is the

CVE-2023-5826 [HIGH] CWE-89 CVE-2023-5826: A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as cri A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/list_onlineuser.php. The manipulation of the argument SessionId leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vuln

CVE-2023-5785 [HIGH] CWE-89 CVE-2023-5785: A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classifi A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This affects an unknown part of the file /protocol/firewall/addaddress_interpret.php. The manipulation of the argument messagecontent leads to sql injection. The exploit has been disclosed to the public and may be used. The associated ident

CVE-2023-5681 [HIGH] CWE-89 CVE-2023-5681: A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Securit A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /admin/list_addr_fwresource_ip.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifie

CVE-2023-7094 [HIGH] CWE-200 CVE-2023-7094: A vulnerability classified as problematic was found in Netentsec NS-ASG Application Security Gateway A vulnerability classified as problematic was found in Netentsec NS-ASG Application Security Gateway 6.3. Affected by this vulnerability is an unknown functionality of the file /protocol/nsasg6.0.tgz. The manipulation leads to information disclosure. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The i

CVE-2024-2648 [MEDIUM] CWE-643 CVE-2024-2648: A vulnerability, which was classified as problematic, was found in Netentsec NS-ASG Application Secu A vulnerability, which was classified as problematic, was found in Netentsec NS-ASG Application Security Gateway 6.3. Affected is an unknown function of the file /nac/naccheck.php. The manipulation of the argument username leads to improper neutralization of data within xpath expressions. It is possible to launch the attack remotely. The exploit has b

CVE-2024-2645 [MEDIUM] CWE-643 CVE-2024-2645: A vulnerability classified as problematic has been found in Netentsec NS-ASG Application Security Ga A vulnerability classified as problematic has been found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /vpnweb/resetpwd/resetpwd.php. The manipulation of the argument UserId leads to improper neutralization of data within xpath expressions. It is possible to initiate the attack remotely. The exploit has