Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2023-30804

Sangfor Next-Gen Application Firewall Authenticated File Disclosure

The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an authenticated file disclosure vulnerability. A remote and authenticated attacker can read arbitrary system files using the svpn_html/loadfile.php endpoint. This issue is exploitable by a remote and unauthenticated attacker when paired with CVE-2023-30803.

CVSS 4.0 · 6.9 Medium EPSS 38.9% KEV · Not listed
Vendors
Sangfor
Products
Next-gen Application Firewall
CVE-2023-30805

Sangfor Next-Gen Application Firewall Login Un Param Command Injection

The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an operating system command injection vulnerability. A remote and unauthenticated attacker can execute arbitrary commands by sending a crafted HTTP POST request to the /LogInOut.php endpoint. This is due to mishandling of shell meta-characters in the "un" parameter.

CVSS 3.1 · 9.8 Critical EPSS 65.0% KEV · Not listed
Vendors
Sangfor
Products
Next-gen Application Firewall
CVE-2023-30803

Sangfor Next-Gen Application Firewall Authentication Bypass

The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an authentication bypass vulnerability. A remote and unauthenticated attacker can bypass authentication and access administrative functionality by sending HTTP requests using a crafted Y-forwarded-for header.

CVSS 3.1 · 9.8 Critical EPSS 20.9% KEV · Not listed
Vendors
Sangfor
Products
Next-gen Application Firewall
CVE-2023-30802

Sangfor Next-Gen Application Firewall Source Code Disclosure

The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to a source code disclosure vulnerability. A remote and unauthenticated attacker can obtain PHP source code by sending an HTTP request with an invalid Content-Length field.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Sangfor
Products
Next-gen Application Firewall
CVE-2023-30806

Sangfor Next-Gen Application Firewall PHPSESSID Command Injection

The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to an operating system command injection vulnerability. A remote and unauthenticated attacker can execute arbitrary commands by sending a crafted HTTP POST request to the /cgi-bin/login.cgi endpoint. This is due to mishandling of shell meta-characters in the PHPSESSID cookie.

CVSS 3.1 · 9.8 Critical EPSS 65.0% KEV · Not listed
Vendors
Sangfor
Products
Net-gen Application Firewall Next-gen Application Firewall