This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2023-30802 | BDVDB-2026-213607 Detail

SangforNet-Gen Application Firewall

Description#

The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to a source code disclosure vulnerability. A remote and unauthenticated attacker can obtain PHP source code by sending an HTTP request with an invalid Content-Length field.

Impact#

CAPEC-167: White Box Reverse Engineering

Weaknesses#

  • CWE-540 Inclusion of Sensitive Information in Source Code

References#

Exploit#

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.