65 matches found
Cross site scripting
Rumpus - FTP server version 9.0.7.1 has a Reflected cross-site scripting RXSS vulnerability through unspecified vectors...
CVE-2022-46369 Rumpus - FTP server Persistent cross-site scripting (PXSS) – Unspecified vector
Rumpus - FTP server version 9.0.7.1 Persistent cross-site scripting PXSS – vulnerability may allow inserting scripts into unspecified input fields...
PT-2023-14918 · Rumpus · Rumpus
Name of the Vulnerable Software and Affected Versions: Rumpus - FTP server version 9.0.7.1 Description: The issue allows for persistent cross-site scripting PXSS, which may enable the insertion of scripts into unspecified input fields. Recommendations: For version 9.0.7.1, update to a newer versi...
CVE-2022-46370 Rumpus - FTP server Improper Token Verification
Rumpus - FTP server version 9.0.7.1 Improper Token Verification– vulnerability may allow bypassing identity verification...
CVE-2022-39187 Rumpus - FTP server Reflected cross-site scripting (RXSS)
Rumpus - FTP server version 9.0.7.1 has a Reflected cross-site scripting RXSS vulnerability through unspecified vectors...
PT-2023-13710 · Rumpus · Rumpus
Name of the Vulnerable Software and Affected Versions: Rumpus - FTP server version 9.0.7.1 Description: The issue is related to a Reflected cross-site scripting RXSS vulnerability. This vulnerability can be exploited through unspecified vectors. Recommendations: For version 9.0.7.1, update to a...
CVE-2022-46367 Rumpus - FTP server Cross-site request forgery (CSRF) – Privilege escalation
Rumpus - FTP server Cross-site request forgery CSRF – Privilege escalation vulnerability that may allow privilege escalation...
PT-2023-14917 · Rumpus · Rumpus
Name of the Vulnerable Software and Affected Versions: Rumpus - FTP server version 9.0.7.1 Description: The issue is related to cross-site request forgery CSRF, which may allow unauthorized actions to be taken on behalf of authenticated users. Recommendations: For Rumpus - FTP server version...
Rumpus FTP Server Web File Manager Cross-Site Request Forgery Vulnerability
Rumpus FTP Web File Manager is a file transfer server. A cross-site request forgery vulnerability exists in the Edit Account feature of Web File Manager in Rumpus FTP Server version 8.2.9.1. The vulnerability stems from the WEB application not adequately verifying that requests are coming from a...
Rumpus FTP Server Web File Manager Cross-Site Request Forgery Vulnerability (CNVD-2020-10630)
Rumpus FTP Web File Manager is a file transfer server. A cross-site request forgery vulnerability exists in the Network Settings feature of Web File Manager in Rumpus FTP Server version 8.2.9.1. The vulnerability stems from the WEB application not adequately verifying that a request is coming fro...
Rumpus FTP Server Web File Manager Web Settings Component Cross-Site Scripting Vulnerability
Rumpus FTP Server is an Internet file transfer solution for the Mac platform. A cross-site scripting vulnerability exists in the Web Settings component of Web File Manager in Rumpus FTP Server version 8.2.9.1. The vulnerability stems from a lack of proper validation of client data by the WEB...
CVE-2019-19670
A HTTP Response Splitting vulnerability was identified in the Web Settings Component of Web File Manager in Rumpus FTP Server 8.2.9.1. A successful exploit can result in stored XSS, website defacement, etc. via ExtraHTTPHeader to RAPR/WebSettingsGeneralSet.html...
CVE-2019-19661
A Cookie based reflected XSS exists in the Web File Manager of Rumpus FTP Server 8.2.9.1, related to RumpusLoginUserName and snp...
CVE-2019-19661
A Cookie based reflected XSS exists in the Web File Manager of Rumpus FTP Server 8.2.9.1, related to RumpusLoginUserName and snp...
Cross site scripting
A HTTP Response Splitting vulnerability was identified in the Web Settings Component of Web File Manager in Rumpus FTP Server 8.2.9.1. A successful exploit can result in stored XSS, website defacement, etc. via ExtraHTTPHeader to RAPR/WebSettingsGeneralSet.html...
Cross site scripting
A Cookie based reflected XSS exists in the Web File Manager of Rumpus FTP Server 8.2.9.1, related to RumpusLoginUserName and snp...
CVE-2019-19670
A HTTP Response Splitting vulnerability was identified in the Web Settings Component of Web File Manager in Rumpus FTP Server 8.2.9.1. A successful exploit can result in stored XSS, website defacement, etc. via ExtraHTTPHeader to RAPR/WebSettingsGeneralSet.html...
CVE-2019-19670
CVE-2019-19670 affects the Web Settings component of the Web File Manager in Rumpus FTP Server 8.2.9.1. The issue is an HTTP Response Splitting vulnerability that can enable stored XSS and defacement through crafted headers sent to RAPR/WebSettingsGeneralSet.html. Multiple connected sources corro...
CVE-2019-19661
CVE-2019-19661 describes a cookie-based reflected XSS in the Web File Manager of Rumpus FTP Server 8.2.9.1, linked to RumpusLoginUserName and snp. Multiple connected records (RH, CNVD, NVD, PRION, CVELIST) corroborate the same issue and product/version, providing consistent description of the vul...