CVE-2019-19664: Cross-Site Request Forgery (CSRF)

A CSRF vulnerability exists in the Web Settings of Web File Manager in Rumpus FTP 8.2.9.1. Exploitation of this vulnerability can result in manipulation of Server Web settings at RAPR/WebSettingsGeneralSet.html...

PT-2020-10210

Name of the Vulnerable Software and Affected Versions Rumpus FTP version 8.2.9.1 Description A CSRF issue exists in the Folder Sets Settings of Web File Manager. This allows an attacker to create or delete folders after exploiting it at the "RAPR/FolderSetsSet.html" endpoint. Recommendations For...

PT-2020-10211

Name of the Vulnerable Software and Affected Versions Rumpus FTP version 8.2.9.1 Description A CSRF issue exists in the Web Settings of Web File Manager. This can be exploited to manipulate Server Web settings at the "RAPR/WebSettingsGeneralSet.html" endpoint. Recommendations For version 8.2.9.1,...

PT-2020-10209

Name of the Vulnerable Software and Affected Versions Rumpus FTP Server version 8.2.9.1 Description A CSRF issue exists in the Web File Manager's Create/Delete Accounts functionality. This allows an attacker to create and delete accounts via the RAPR/TriggerServerFunction.html endpoint...

PT-2020-10217

Name of the Vulnerable Software and Affected Versions Rumpus FTP Server version 8.2.9.1 Description A HTTP Response Splitting issue was identified in the Web Settings Component of Web File Manager. This can be exploited to achieve stored XSS or website defacement by manipulating the ExtraHTTPHead...

PT-2020-10214

Name of the Vulnerable Software and Affected Versions Rumpus FTP version 8.2.9.1 Description A CSRF issue exists in the Block Clients component of Web File Manager that could allow an attacker to modify IP address settings, specifically to whitelist or block any IP address, by accessing the...

PT-2020-10216

Name of the Vulnerable Software and Affected Versions Rumpus FTP version 8.2.9.1 Description A CSRF issue exists in the Upload Center Forms Component of Web File Manager. This could allow an attacker to perform unauthorized actions such as deleting, creating, and updating upload forms via the...

PT-2020-10212

Name of the Vulnerable Software and Affected Versions Rumpus FTP version 8.2.9.1 Description A CSRF issue exists in the FTP Settings of Web File Manager. This can be exploited to manipulate Server FTP settings at the "RAPR/FTPSettingsSet.html" endpoint. Recommendations For version 8.2.9.1, as a...

PT-2020-10207

Name of the Vulnerable Software and Affected Versions Rumpus FTP Server version 8.2.9.1 Description A CSRF issue exists in the Web File Manager's Network Setting functionality. This allows an attacker to manipulate the SMTP setting and other network settings via the "RAPR/NetworkSettingsSet.html"...

PT-2020-10215

Name of the Vulnerable Software and Affected Versions Rumpus FTP version 8.2.9.1 Description A CSRF issue exists in the File Types component of Web File Manager that allows an attacker to add or delete file types used on the server via "RAPR/TriggerServerFunction.html". Recommendations For versio...

PT-2020-10213

Name of the Vulnerable Software and Affected Versions Rumpus FTP version 8.2.9.1 Description A CSRF issue exists in the Event Notices Settings of Web File Manager. This allows an attacker to create or update event notices via the "RAPR/EventNoticesSet.html" endpoint. Recommendations For Rumpus FT...

PT-2020-10208

Name of the Vulnerable Software and Affected Versions Rumpus FTP Server version 8.2.9.1 Description A Cookie based reflected XSS issue exists in the Web File Manager, related to RumpusLoginUserName and snp. Recommendations For Rumpus FTP Server version 8.2.9.1, consider restricting access to the...

PT-2020-10206

Name of the Vulnerable Software and Affected Versions Rumpus FTP Server version 8.2.9.1 Description A CSRF issue exists in the Web File Manager's Edit Accounts functionality. This allows an attacker to take over a user account by changing the password, update users' details, and escalate privileg...

Pandora FMS Remote Code Execution Vulnerability

Pandora FMS is an open source application , used to monitor the site's various activities , it can receive real-time monitoring reports , and sent to your designated mailbox , you can also send via e-mail , SMS . A remote code execution vulnerability exists in Pandora FMS 7.42 and earlier version...

CVE-2019-20050

CVE-2019-20050 affects Pandora FMS ≤ 7.42. A remote code execution exists when an authenticated user creates a folder with a “tricky” name in the filemanager; the exploit requires the php-fileinfo extension to be disabled and the attacker to include shell metacharacters in the content type. This ...

CVE-2013-3960

Easytime Studio Easy File Manager 1.1 has a HTTP request security bypass...

Design/Logic Flaw

Easytime Studio Easy File Manager 1.1 has a HTTP request security bypass...

CVE-2013-3960

Easytime Studio Easy File Manager 1.1 has a HTTP request security bypass...

CVE-2013-3960

Technical details for CVE-2013-3960 are not publicly provided in the supplied documents; available references only reiterate a security bypass in Easytime Studio Easy File Manager 1.1. Monitor for updates.

PT-2020-7476

Name of the Vulnerable Software and Affected Versions: Easytime Studio Easy File Manager version 1.1 Description: The issue concerns a security bypass related to HTTP requests. Recommendations: For Easytime Studio Easy File Manager version 1.1, at the moment, there is no information about a newer...