Netentsec NS-ASG Application Security Gateway list_onlineuser.php sql injection
CVE-2023-5826

8.8HIGH

Key Information:

Vendor

Netentsec

Status
NS-ASG Application Security Gateway
Vendor
CVE Published:
27 October 2023

What is CVE-2023-5826?

A vulnerability has been identified in the Netentsec NS-ASG Application Security Gateway, specifically affecting the functionality associated with the /admin/list_onlineuser.php file. This weakness allows for SQL injection through manipulation of the SessionId parameter, potentially exposing sensitive information and granting unauthorized access to the database. The exploit has been publicly disclosed, highlighting the urgency for users to take necessary precautions, assess their systems, and apply available mitigations to safeguard their data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

NS-ASG Application Security Gateway 6.3

References

https://vuldb.com/?id.243716
vdb-entrytechnical-description
https://vuldb.com/?ctiid.243716
signaturepermissions-required
https://github.com/Cubi123123123/cve/blob/main/NS-ASG-sql...
exploit

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

1558549441 (VulDB User)
JSON
.