CVE-2020-27575

Maxum Rumpus 8.2.13 and 8.2.14 is affected by a command injection vulnerability. The web administration contains functionality in which administrators are able to manage users. The edit users form contains a parameter vulnerable to command injection due to insufficient validation...

Cross site scripting

Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site scripting XSS. Users are able to create folders in the web application. The folder name is insufficiently validated resulting in a stored cross-site scripting vulnerability...

Command injection

Maxum Rumpus 8.2.13 and 8.2.14 is affected by a command injection vulnerability. The web administration contains functionality in which administrators are able to manage users. The edit users form contains a parameter vulnerable to command injection due to insufficient validation...

CVE-2020-27574

Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site request forgery CSRF. If an authenticated user visits a malicious page, unintended actions could be performed in the web application as the authenticated user...

CVE-2020-27574

Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site request forgery CSRF. If an authenticated user visits a malicious page, unintended actions could be performed in the web application as the authenticated user...

Cross site request forgery (csrf)

Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site request forgery CSRF. If an authenticated user visits a malicious page, unintended actions could be performed in the web application as the authenticated user...

CVE-2020-27576

Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site scripting XSS. Users are able to create folders in the web application. The folder name is insufficiently validated resulting in a stored cross-site scripting vulnerability...

CVE-2020-27576

Maxum Rumpus 8.2.13 and 8.2.14 are affected by a stored cross-site scripting (XSS) vulnerability in the web UI when creating folders, caused by insufficient validation of folder names. The issue can allow injection and execution of JavaScript in the victim’s browser. Several sources (RH, CNVD, CV...

CVE-2020-27575

Maxum Rumpus versions 8.2.13 and 8.2.14 are affected by a command injection vulnerability in the web admin Edit Users form, where an input parameter is vulnerably validated. Root cause: insufficient input validation in the Edit User parameter enables arbitrary command execution. Impact stated acr...

CVE-2020-27575

Maxum Rumpus 8.2.13 and 8.2.14 is affected by a command injection vulnerability. The web administration contains functionality in which administrators are able to manage users. The edit users form contains a parameter vulnerable to command injection due to insufficient validation...

CVE-2020-27574

Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site request forgery CSRF. If an authenticated user visits a malicious page, unintended actions could be performed in the web application as the authenticated user...

CVE-2020-27574

CVE-2020-27574 relates to a cross-site request forgery (CSRF) affecting Maxum Rumpus versions 8.2.13 and 8.2.14. The vulnerability allows an attacker to cause actions within the web application as an authenticated user when that user visits a malicious page. The available connected documents cons...

CVE-2020-27576: Improper Neutralization of Input During Web Page Generation

Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site scripting XSS. Users are able to create folders in the web application. The folder name is insufficiently validated resulting in a stored cross-site scripting vulnerability...

Maxum Rumpus 跨站脚本漏洞

Maxum Rumpus is an FTP and Web file transfer server. Maxum Rumpus 8.2.13, 8.2.14 suffers from a cross-site scripting vulnerability that can be exploited by an attacker to inject and execute JavaScript code...

PT-2021-11410

Name of the Vulnerable Software and Affected Versions: Maxum Rumpus versions 8.2.13 through 8.2.14 Description: The issue is related to cross-site scripting XSS, specifically a stored XSS vulnerability. This occurs because the folder name in the web application is insufficiently validated, allowi...

PT-2021-11409

Name of the Vulnerable Software and Affected Versions: Maxum Rumpus versions 8.2.13 through 8.2.14 Description: The issue affects the web administration functionality, specifically the edit users form, where a parameter is vulnerable to command injection due to insufficient validation. This allow...

PT-2021-11408

Name of the Vulnerable Software and Affected Versions: Maxum Rumpus versions 8.2.13 through 8.2.14 Description: The issue allows for cross-site request forgery CSRF attacks. If an authenticated user visits a malicious page, it could lead to unintended actions being performed in the web applicatio...

CVE-2020-27575: Improper Neutralization of Special Elements used in an OS Command

Maxum Rumpus 8.2.13 and 8.2.14 is affected by a command injection vulnerability. The web administration contains functionality in which administrators are able to manage users. The edit users form contains a parameter vulnerable to command injection due to insufficient validation...

CVE-2020-27574: Cross-Site Request Forgery (CSRF)

Maxum Rumpus 8.2.13 and 8.2.14 is affected by cross-site request forgery CSRF. If an authenticated user visits a malicious page, unintended actions could be performed in the web application as the authenticated user...

Maxum Rumpus 命令注入漏洞

Maxum Rumpus is an FTP and Web file transfer server. A command injection vulnerability exists in a parameter of the Edit User form in Maxum Rumpus 8.2.13, 8.2.14, which can be exploited by an attacker to inject arbitrary commands...