Vulnerability CVE-2019-16068

Author:Source March 23, 2020

Published: 2020-03-19 Modified: 2020-03-20

Description:

A CSRF vulnerability exists in NETSAS ENIGMA NMS version 65.0.0 and prior that could allow an attacker to be able to trick a victim into submitting a malicious manage_files.cgi request. This can be triggered via XSS or an IFRAME tag included within the site.

See advisories in our WLB2 database:

Type:

CWE-352

(Cross-Site Request Forgery (CSRF))

CVSS2 => (AV:N/AC:M/Au:N/C:P/I:P/A:P)

CVSS Base Score Impact Subscore Exploitability Subscore

6.8/10

6.4/10

8.6/10

Exploit range Attack complexity Authentication

Remote

Medium

No required

Confidentiality impact Integrity impact Availability impact

Partial

Partial

Partial

References:

(CVE-2019-16061 –> CVE-2019-16072) Enigma NMS Multiple Vulnerabilities

closedb();
?>

Source link

 Category VulnerabilitiesNetwork

Vulnerability Summary for the Week of March 1, 2021

Source

March 8, 2021

activerecord-session_store — activerecord-session_store The activerecord-session_store (aka Active Record Session Store) component through 1.1.3 for Ruby...

 Category VulnerabilitiesNetwork

HomePlus Pro, SmartNetwork 2, Xenon, & more…

Source

March 7, 2021

With so much happening in the jailbreak community recently, especially with regard to the unc0ver...

 Category VulnerabilitiesNetwork

Samsung fixes critical Android bugs in March 2021 updates

Source

March 6, 2021

This week Samsung has started rolling out Android’s March security updates to mobile devices to...

 Category VulnerabilitiesNetwork

Clubhouse Media Group Announces The Formation Of Groundbreaking Creator Advisory Panel

Source

March 5, 2021

LOS ANGELES, March 5, 2021 /PRNewswire/ — Clubhouse Media Group Inc. (OTCMKTS:CMGR) (“Clubhouse Media” or the...

 Category VulnerabilitiesNetwork

China and Russia’s Spying Sprees Will Take Years to Unpack

Source

March 4, 2021

First it was Solarwinds, a reportedly Russian hacking campaign that stretches back almost a year,...

 Category VulnerabilitiesNetwork

Google fixes second actively exploited Chrome zero-day bug this year

Source

March 3, 2021

Google has fixed an actively exploited zero-day vulnerability in the Chrome 89.0.4389.72 version released today, March 2nd,...

 Category VulnerabilitiesNetwork

Version checken: “High Resistance”-Firewall GeNUGate barg kritische Lücke

Source

March 2, 2021

Das Unternehmen SEC Consult hat eine kritische Sicherheitslücke in der Firewall GeNUGate der GeNUA mbH...

 Category VulnerabilitiesNetwork

Genua GenuGate High Resistance Firewall Authentication Bypass

Source

March 1, 2021

SEC Consult Vulnerability Lab Security Advisory < 20210301-0 > ======================================================================= title: Authentication bypass vulnerability product:...