7 matches found
Cross site request forgery (csrf)
A CSRF vulnerability exists in the Web File Manager's Create/Delete Accounts functionality of Rumpus FTP Server 8.2.9.1. By exploiting it, an attacker can Create and Delete accounts via RAPR/TriggerServerFunction.html...
CVE-2019-19662: Cross-Site Request Forgery (CSRF)
A CSRF vulnerability exists in the Web File Manager's Create/Delete Accounts functionality of Rumpus FTP Server 8.2.9.1. By exploiting it, an attacker can Create and Delete accounts via RAPR/TriggerServerFunction.html...
CVE-2019-19669: Cross-Site Request Forgery (CSRF)
A CSRF vulnerability exists in the Upload Center Forms Component of Web File Manager in Rumpus FTP 8.2.9.1. This could allow an attacker to delete, create, and update the upload forms via RAPR/TriggerServerFunction.html...
PT-2020-10216
Name of the Vulnerable Software and Affected Versions Rumpus FTP version 8.2.9.1 Description A CSRF issue exists in the Upload Center Forms Component of Web File Manager. This could allow an attacker to perform unauthorized actions such as deleting, creating, and updating upload forms via the...
PT-2020-10209
Name of the Vulnerable Software and Affected Versions Rumpus FTP Server version 8.2.9.1 Description A CSRF issue exists in the Web File Manager's Create/Delete Accounts functionality. This allows an attacker to create and delete accounts via the RAPR/TriggerServerFunction.html endpoint...
PT-2020-10215
Name of the Vulnerable Software and Affected Versions Rumpus FTP version 8.2.9.1 Description A CSRF issue exists in the File Types component of Web File Manager that allows an attacker to add or delete file types used on the server via "RAPR/TriggerServerFunction.html". Recommendations For versio...
CVE-2019-19668: Cross-Site Request Forgery (CSRF)
A CSRF vulnerability exists in the File Types component of Web File Manager in Rumpus FTP 8.2.9.1 that allows an attacker to add or delete the file types that are used on the server via RAPR/TriggerServerFunction.html...