4217 matches found
CVE-2019-19659
A CSRF vulnerability exists in the Web File Manager's Edit Accounts functionality of Rumpus FTP Server 8.2.9.1. By exploiting it, an attacker can take over a user account by changing the password, update users' details, and escalate privileges via RAPR/DefineUsersSet.html...
CVE-2019-19660
A CSRF vulnerability exists in the Web File Manager's Network Setting functionality of Rumpus FTP Server 8.2.9.1. By exploiting it, an attacker can manipulate the SMTP setting and other network settings via RAPR/NetworkSettingsSet.html...
CVE-2019-19664: Cross-Site Request Forgery (CSRF)
A CSRF vulnerability exists in the Web Settings of Web File Manager in Rumpus FTP 8.2.9.1. Exploitation of this vulnerability can result in manipulation of Server Web settings at RAPR/WebSettingsGeneralSet.html...
PT-2020-10216
Name of the Vulnerable Software and Affected Versions Rumpus FTP version 8.2.9.1 Description A CSRF issue exists in the Upload Center Forms Component of Web File Manager. This could allow an attacker to perform unauthorized actions such as deleting, creating, and updating upload forms via the...
PT-2020-10207
Name of the Vulnerable Software and Affected Versions Rumpus FTP Server version 8.2.9.1 Description A CSRF issue exists in the Web File Manager's Network Setting functionality. This allows an attacker to manipulate the SMTP setting and other network settings via the "RAPR/NetworkSettingsSet.html"...
PT-2020-10206
Name of the Vulnerable Software and Affected Versions Rumpus FTP Server version 8.2.9.1 Description A CSRF issue exists in the Web File Manager's Edit Accounts functionality. This allows an attacker to take over a user account by changing the password, update users' details, and escalate privileg...
PT-2020-10215
Name of the Vulnerable Software and Affected Versions Rumpus FTP version 8.2.9.1 Description A CSRF issue exists in the File Types component of Web File Manager that allows an attacker to add or delete file types used on the server via "RAPR/TriggerServerFunction.html". Recommendations For versio...
PT-2020-10209
Name of the Vulnerable Software and Affected Versions Rumpus FTP Server version 8.2.9.1 Description A CSRF issue exists in the Web File Manager's Create/Delete Accounts functionality. This allows an attacker to create and delete accounts via the RAPR/TriggerServerFunction.html endpoint...
PT-2020-10210
Name of the Vulnerable Software and Affected Versions Rumpus FTP version 8.2.9.1 Description A CSRF issue exists in the Folder Sets Settings of Web File Manager. This allows an attacker to create or delete folders after exploiting it at the "RAPR/FolderSetsSet.html" endpoint. Recommendations For...
PT-2020-10217
Name of the Vulnerable Software and Affected Versions Rumpus FTP Server version 8.2.9.1 Description A HTTP Response Splitting issue was identified in the Web Settings Component of Web File Manager. This can be exploited to achieve stored XSS or website defacement by manipulating the ExtraHTTPHead...
PT-2020-10208
Name of the Vulnerable Software and Affected Versions Rumpus FTP Server version 8.2.9.1 Description A Cookie based reflected XSS issue exists in the Web File Manager, related to RumpusLoginUserName and snp. Recommendations For Rumpus FTP Server version 8.2.9.1, consider restricting access to the...
PT-2020-10212
Name of the Vulnerable Software and Affected Versions Rumpus FTP version 8.2.9.1 Description A CSRF issue exists in the FTP Settings of Web File Manager. This can be exploited to manipulate Server FTP settings at the "RAPR/FTPSettingsSet.html" endpoint. Recommendations For version 8.2.9.1, as a...
PT-2020-10214
Name of the Vulnerable Software and Affected Versions Rumpus FTP version 8.2.9.1 Description A CSRF issue exists in the Block Clients component of Web File Manager that could allow an attacker to modify IP address settings, specifically to whitelist or block any IP address, by accessing the...
PT-2020-10211
Name of the Vulnerable Software and Affected Versions Rumpus FTP version 8.2.9.1 Description A CSRF issue exists in the Web Settings of Web File Manager. This can be exploited to manipulate Server Web settings at the "RAPR/WebSettingsGeneralSet.html" endpoint. Recommendations For version 8.2.9.1,...
PT-2020-10213
Name of the Vulnerable Software and Affected Versions Rumpus FTP version 8.2.9.1 Description A CSRF issue exists in the Event Notices Settings of Web File Manager. This allows an attacker to create or update event notices via the "RAPR/EventNoticesSet.html" endpoint. Recommendations For Rumpus FT...
CVE-2019-19661: Improper Neutralization of Input During Web Page Generation
A Cookie based reflected XSS exists in the Web File Manager of Rumpus FTP Server 8.2.9.1, related to RumpusLoginUserName and snp...
Pandora FMS Remote Code Execution Vulnerability
Pandora FMS is an open source application , used to monitor the site's various activities , it can receive real-time monitoring reports , and sent to your designated mailbox , you can also send via e-mail , SMS . A remote code execution vulnerability exists in Pandora FMS 7.42 and earlier version...
CVE-2019-20050
CVE-2019-20050 affects Pandora FMS ≤ 7.42. A remote code execution exists when an authenticated user creates a folder with a “tricky” name in the filemanager; the exploit requires the php-fileinfo extension to be disabled and the attacker to include shell metacharacters in the content type. This ...
