CVE-2020-27575

Maxum Rumpus 8.2.13 and 8.2.14 is affected by a command injection vulnerability. The web administration contains functionality in which administrators are able to manage users. The edit users form contains a parameter vulnerable to command injection due to insufficient validation...

Command injection

Maxum Rumpus 8.2.13 and 8.2.14 is affected by a command injection vulnerability. The web administration contains functionality in which administrators are able to manage users. The edit users form contains a parameter vulnerable to command injection due to insufficient validation...

Cross site scripting

Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site scripting XSS. Users are able to create folders in the web application. The folder name is insufficiently validated resulting in a stored cross-site scripting vulnerability...

CVE-2020-27574

Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site request forgery CSRF. If an authenticated user visits a malicious page, unintended actions could be performed in the web application as the authenticated user...

CVE-2020-27574

Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site request forgery CSRF. If an authenticated user visits a malicious page, unintended actions could be performed in the web application as the authenticated user...

Cross site request forgery (csrf)

Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site request forgery CSRF. If an authenticated user visits a malicious page, unintended actions could be performed in the web application as the authenticated user...

CVE-2020-27576

Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site scripting XSS. Users are able to create folders in the web application. The folder name is insufficiently validated resulting in a stored cross-site scripting vulnerability...

CVE-2020-27576

Maxum Rumpus 8.2.13 and 8.2.14 are affected by a stored cross-site scripting (XSS) vulnerability in the web UI when creating folders, caused by insufficient validation of folder names. The issue can allow injection and execution of JavaScript in the victim’s browser. Several sources (RH, CNVD, CV...

CVE-2020-27575

Maxum Rumpus 8.2.13 and 8.2.14 is affected by a command injection vulnerability. The web administration contains functionality in which administrators are able to manage users. The edit users form contains a parameter vulnerable to command injection due to insufficient validation...

CVE-2020-27575

Maxum Rumpus versions 8.2.13 and 8.2.14 are affected by a command injection vulnerability in the web admin Edit Users form, where an input parameter is vulnerably validated. Root cause: insufficient input validation in the Edit User parameter enables arbitrary command execution. Impact stated acr...

CVE-2020-27574

Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site request forgery CSRF. If an authenticated user visits a malicious page, unintended actions could be performed in the web application as the authenticated user...

CVE-2020-27574

CVE-2020-27574 relates to a cross-site request forgery (CSRF) affecting Maxum Rumpus versions 8.2.13 and 8.2.14. The vulnerability allows an attacker to cause actions within the web application as an authenticated user when that user visits a malicious page. The available connected documents cons...

Maxum Rumpus 跨站请求伪造漏洞

Maxum Rumpus is an FTP and Web file transfer server. A cross-site request forgery vulnerability exists in Maxum Rumpus 8.2.13, 8.2.14, which can be exploited by an attacker to perform an operation as an authenticated user by tricking a user into visiting a malicious page...

Maxum Rumpus 跨站脚本漏洞

Maxum Rumpus is an FTP and Web file transfer server. Maxum Rumpus 8.2.13, 8.2.14 suffers from a cross-site scripting vulnerability that can be exploited by an attacker to inject and execute JavaScript code...

Maxum Rumpus 命令注入漏洞

Maxum Rumpus is an FTP and Web file transfer server. A command injection vulnerability exists in a parameter of the Edit User form in Maxum Rumpus 8.2.13, 8.2.14, which can be exploited by an attacker to inject arbitrary commands...

Maxum Development Rumpus Path Traversal Vulnerability

Maxum Development Rumpus is a suite of file transfer server software from Maxum Development in the United States. A security vulnerability exists in Maxum Development Rumpus versions prior to 8.2.12 macOS. An attacker can exploit the vulnerability to access arbitrary files on the server...

CVE-2020-12737

An issue was discovered in Maxum Rumpus before 8.2.12 on macOS. Authenticated users can perform a path traversal using double escaped characters, enabling read access to arbitrary files on the server...

Path traversal

An issue was discovered in Maxum Rumpus before 8.2.12 on macOS. Authenticated users can perform a path traversal using double escaped characters, enabling read access to arbitrary files on the server...

CVE-2020-12737

CVE-2020-12737 affects Maxum Rumpus on macOS prior to version 8.2.12. The issue is a path traversal vulnerability where authenticated users can use double-escaped characters to read arbitrary files on the server. Impact is read access to sensitive files; no other compromises are specified. Remedi...

CVE-2020-12737

An issue was discovered in Maxum Rumpus before 8.2.12 on macOS. Authenticated users can perform a path traversal using double escaped characters, enabling read access to arbitrary files on the server...