CVE-2019-19663

CVE-2019-19663 concerns the Web File Manager’s Folder Sets Settings in Rumpus FTP 8.2.9.1. The issue is a Cross-Site Request Forgery (CSRF) vulnerability in the Folder Sets Settings page (RAPR/FolderSetsSet.html) that enables an attacker to create or delete folders. The affected product is Rumpus...

CVE-2019-19659

A CSRF vulnerability exists in the Web File Manager's Edit Accounts functionality of Rumpus FTP Server 8.2.9.1. By exploiting it, an attacker can take over a user account by changing the password, update users' details, and escalate privileges via RAPR/DefineUsersSet.html...

CVE-2019-19659

CVE-2019-19659 concerns a CSRF vulnerability in the Web File Manager’s Edit Accounts functionality of Rumpus FTP Server 8.2.9.1. The issue allows an attacker to modify a user password and update user details, enabling privilege escalation via RAPR/DefineUsersSet.html. Documents consistently descr...

CVE-2019-19660

A CSRF vulnerability exists in the Web File Manager's Network Setting functionality of Rumpus FTP Server 8.2.9.1. By exploiting it, an attacker can manipulate the SMTP setting and other network settings via RAPR/NetworkSettingsSet.html...

CVE-2019-19660

The CVE-2019-19660 entry concerns a CSRF vulnerability in the Web File Manager’s Network Settings of Rumpus FTP Server 8.2.9.1 . The issue allows an attacker to manipulate settings such as the SMTP value and other network parameters via RAPR/NetworkSettingsSet.html . Affected component is the Web...

CVE-2020-8514

An issue was discovered in Rumpus 8.2.10 on macOS. By crafting a directory name, it is possible to activate JavaScript in the context of the web application after invoking the rename folder functionality...

CVE-2020-8514

An issue was discovered in Rumpus 8.2.10 on macOS. By crafting a directory name, it is possible to activate JavaScript in the context of the web application after invoking the rename folder functionality...

Design/Logic Flaw

An issue was discovered in Rumpus 8.2.10 on macOS. By crafting a directory name, it is possible to activate JavaScript in the context of the web application after invoking the rename folder functionality...

CVE-2020-8514

CVE-2020-8514 concerns Rumpus 8.2.10 on macOS, where crafting a directory name can trigger a JavaScript payload in the web app after invoking the rename folder function, effectively a cross-site scripting issue in the web interface. The documents collectively indicate an XSS scenario in the Maxum...

CVE-2020-8514

An issue was discovered in Rumpus 8.2.10 on macOS. By crafting a directory name, it is possible to activate JavaScript in the context of the web application after invoking the rename folder functionality...

Rumpus FTP Web File Manager 8.2.9.1 - Reflected Cross-Site Scripting

Rumpus FTP Web File Manager 8.2.9.1 - Reflected Cross-Site Scripting Exploit Title: Rumpus FTP Web File Manager 8.2.9.1 - Reflected Cross-Site Scripting Google Dork: site:..com "Web File Manager" inurl:?login= Shodan Dork: Server: Rumpus Date: 2019-12-14 Exploit Author: Harshit Shukla, Sudeepto R...

Rumpus FTP Web File Manager 8.2.9.1 Cross Site Scripting

Exploit Title: Rumpus FTP Web File Manager 8.2.9.1 - Reflected Cross-Site Scripting Google Dork: site:..com "Web File Manager" inurl:?login= Shodan Dork: Server: Rumpus Date: 2019-12-14 Exploit Author: Harshit Shukla, Sudeepto Roy Vendor Homepage: https://www.maxum.com/ Tested On: Windows & Mac...

Rumpus FTP Web File Manager 8.2.9.1 - Reflected Cross-Site Scripting Vulnerability

Exploit for asp platform in category web applications Exploit Title: Rumpus FTP Web File Manager 8.2.9.1 - Reflected Cross-Site Scripting Google Dork: site:..com "Web File Manager" inurl:?login= Shodan Dork: Server: Rumpus Exploit Author: Harshit Shukla, Sudeepto Roy Vendor Homepage:...

Rumpus FTP Web File Manager 8.2.9.1 - Reflected Cross-Site Scripting

Exploit Title: Rumpus FTP Web File Manager 8.2.9.1 - Reflected Cross-Site Scripting Google Dork: site:..com "Web File Manager" inurl:?login= Shodan Dork: Server: Rumpus Date: 2019-12-14 Exploit Author: Harshit Shukla, Sudeepto Roy Vendor Homepage: https://www.maxum.com/ Tested On: Windows & Mac...

Rumpus FTP Web File Manager Cross-Site Scripting Vulnerability

Rumpus FTP Web File Manager is a file transfer server. A cross-site scripting vulnerability exists in the login page in Rumpus FTP Web File Manager version 8.2.9.1. The vulnerability stems from a lack of proper validation of client data by the web application. An attacker can exploit this...

CVE-2019-19368

A Reflected Cross Site Scripting was discovered in the Login page of Rumpus FTP Web File Manager 8.2.9.1. An attacker can exploit it by sending a crafted link to end users and can execute arbitrary Javascripts...

CVE-2019-19368

A Reflected Cross Site Scripting was discovered in the Login page of Rumpus FTP Web File Manager 8.2.9.1. An attacker can exploit it by sending a crafted link to end users and can execute arbitrary Javascripts...

Cross site scripting

A Reflected Cross Site Scripting was discovered in the Login page of Rumpus FTP Web File Manager 8.2.9.1. An attacker can exploit it by sending a crafted link to end users and can execute arbitrary Javascripts...

CVE-2019-19368

A Reflected Cross Site Scripting was discovered in the Login page of Rumpus FTP Web File Manager 8.2.9.1. An attacker can exploit it by sending a crafted link to end users and can execute arbitrary Javascripts...

CVE-2019-19368

Rumpus FTP Web File Manager 8.2.9.1 is affected by a reflected Cross‑Site Scripting vulnerability on the Login page. An attacker can entice a user to click a crafted link, enabling execution of arbitrary JavaScript in the victim’s browser (potential session hijacking/defacement or data theft). Ro...