Lucene search
+L

249 matches found

NVD
NVD
added 2020/02/10 4:15 p.m.24 views

CVE-2019-19665

A CSRF vulnerability exists in the FTP Settings of Web File Manager in Rumpus FTP 8.2.9.1. Exploitation of this vulnerability can result in manipulation of Server FTP settings at RAPR/FTPSettingsSet.html...

6.5CVSS6.5AI score0.00435EPSS
SaveExploits0References2
OSV
OSV
added 2020/02/10 4:15 p.m.9 views

CVE-2019-19665

A CSRF vulnerability exists in the FTP Settings of Web File Manager in Rumpus FTP 8.2.9.1. Exploitation of this vulnerability can result in manipulation of Server FTP settings at RAPR/FTPSettingsSet.html...

6.5CVSS6.6AI score0.00435EPSS
SaveExploits0References2
NVD
NVD
added 2020/02/10 4:15 p.m.24 views

CVE-2019-19659

A CSRF vulnerability exists in the Web File Manager's Edit Accounts functionality of Rumpus FTP Server 8.2.9.1. By exploiting it, an attacker can take over a user account by changing the password, update users' details, and escalate privileges via RAPR/DefineUsersSet.html...

8.8CVSS8.8AI score0.0049EPSS
SaveExploits0References2
OSV
OSV
added 2020/02/10 4:15 p.m.9 views

CVE-2019-19659

A CSRF vulnerability exists in the Web File Manager's Edit Accounts functionality of Rumpus FTP Server 8.2.9.1. By exploiting it, an attacker can take over a user account by changing the password, update users' details, and escalate privileges via RAPR/DefineUsersSet.html...

8.8CVSS7.3AI score0.0049EPSS
SaveExploits0References2
Prion
Prion
added 2020/02/10 4:15 p.m.22 views

Cross site request forgery (csrf)

A CSRF vulnerability exists in the Folder Sets Settings of Web File Manager in Rumpus FTP 8.2.9.1. This allows an attacker to Create/Delete Folders after exploiting it at RAPR/FolderSetsSet.html...

5.8CVSS6.4AI score0.00435EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/02/10 4:00 p.m.31 views

CVE-2019-19665

A CSRF vulnerability exists in the FTP Settings of Web File Manager in Rumpus FTP 8.2.9.1. Exploitation of this vulnerability can result in manipulation of Server FTP settings at RAPR/FTPSettingsSet.html...

6.5AI score0.00435EPSS
SaveExploits0References2
CVE
CVE
added 2020/02/10 4:00 p.m.58 views

CVE-2019-19665

A CSRF vulnerability exists in the FTP Settings component of Web File Manager in Rumpus FTP 8.2.9.1. Exploitation can manipulate server FTP settings via RAPR/FTPSettingsSet.html. The CVE records consistently describe the flaw across multiple feeds (Red Hat, CNVD, CVE.org listings) but do not prov...

6.5CVSS6.5AI score0.00435EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2020/02/10 3:48 p.m.31 views

CVE-2019-19659

A CSRF vulnerability exists in the Web File Manager's Edit Accounts functionality of Rumpus FTP Server 8.2.9.1. By exploiting it, an attacker can take over a user account by changing the password, update users' details, and escalate privileges via RAPR/DefineUsersSet.html...

8.8AI score0.0049EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2020/02/10 3:39 p.m.33 views

CVE-2019-19660

A CSRF vulnerability exists in the Web File Manager's Network Setting functionality of Rumpus FTP Server 8.2.9.1. By exploiting it, an attacker can manipulate the SMTP setting and other network settings via RAPR/NetworkSettingsSet.html...

6.5AI score0.00435EPSS
SaveExploits0References2
exploitpack
exploitpack
added 2019/12/18 12:00 a.m.160 views

Rumpus FTP Web File Manager 8.2.9.1 - Reflected Cross-Site Scripting

Rumpus FTP Web File Manager 8.2.9.1 - Reflected Cross-Site Scripting Exploit Title: Rumpus FTP Web File Manager 8.2.9.1 - Reflected Cross-Site Scripting Google Dork: site:..com "Web File Manager" inurl:?login= Shodan Dork: Server: Rumpus Date: 2019-12-14 Exploit Author: Harshit Shukla, Sudeepto R...

4.3CVSS6.2AI score0.25889EPSS
SaveExploits5
zdt
zdt
added 2019/12/18 12:00 a.m.104 views

Rumpus FTP Web File Manager 8.2.9.1 - Reflected Cross-Site Scripting Vulnerability

Exploit for asp platform in category web applications Exploit Title: Rumpus FTP Web File Manager 8.2.9.1 - Reflected Cross-Site Scripting Google Dork: site:..com "Web File Manager" inurl:?login= Shodan Dork: Server: Rumpus Exploit Author: Harshit Shukla, Sudeepto Roy Vendor Homepage:...

6.4AI score0.25889EPSS
SaveExploits5
Exploit DB
Exploit DB
added 2019/12/18 12:00 a.m.177 views

Rumpus FTP Web File Manager 8.2.9.1 - Reflected Cross-Site Scripting

Exploit Title: Rumpus FTP Web File Manager 8.2.9.1 - Reflected Cross-Site Scripting Google Dork: site:..com "Web File Manager" inurl:?login= Shodan Dork: Server: Rumpus Date: 2019-12-14 Exploit Author: Harshit Shukla, Sudeepto Roy Vendor Homepage: https://www.maxum.com/ Tested On: Windows & Mac...

6.1CVSS6.2AI score0.25889EPSS
SaveExploits5
CNVD
CNVD
added 2019/12/17 12:00 a.m.87 views

Rumpus FTP Web File Manager Cross-Site Scripting Vulnerability

Rumpus FTP Web File Manager is a file transfer server. A cross-site scripting vulnerability exists in the login page in Rumpus FTP Web File Manager version 8.2.9.1. The vulnerability stems from a lack of proper validation of client data by the web application. An attacker can exploit this...

6.1CVSS6.4AI score0.25889EPSS
SaveExploits5References1
NVD
NVD
added 2019/12/16 4:15 p.m.68 views

CVE-2019-19368

A Reflected Cross Site Scripting was discovered in the Login page of Rumpus FTP Web File Manager 8.2.9.1. An attacker can exploit it by sending a crafted link to end users and can execute arbitrary Javascripts...

6.1CVSS6.2AI score0.25889EPSS
SaveExploits5References3
OSV
OSV
added 2019/12/16 4:15 p.m.19 views

CVE-2019-19368

A Reflected Cross Site Scripting was discovered in the Login page of Rumpus FTP Web File Manager 8.2.9.1. An attacker can exploit it by sending a crafted link to end users and can execute arbitrary Javascripts...

6.1CVSS6AI score0.25889EPSS
SaveExploits5References3
Cvelist
Cvelist
added 2019/12/16 3:55 p.m.45 views

CVE-2019-19368

A Reflected Cross Site Scripting was discovered in the Login page of Rumpus FTP Web File Manager 8.2.9.1. An attacker can exploit it by sending a crafted link to end users and can execute arbitrary Javascripts...

6.2AI score0.25889EPSS
SaveExploits5References3
CVE
CVE
added 2019/12/16 3:55 p.m.99 views

CVE-2019-19368

Rumpus FTP Web File Manager 8.2.9.1 is affected by a reflected Cross‑Site Scripting vulnerability on the Login page. An attacker can entice a user to click a crafted link, enabling execution of arbitrary JavaScript in the victim’s browser (potential session hijacking/defacement or data theft). Ro...

6.1CVSS6.2AI score0.25889EPSS
SaveExploits5References3Affected Software1
CNVD
CNVD
added 2019/04/02 12:00 a.m.43 views

Pydio Cross-Site Scripting Vulnerability (CNVD-2019-14091)

Pydio AjaXplorer is a web-based remote file manager. The manager supports uploading and downloading files, online file editing, image previewing and more. A cross-site scripting vulnerability exists in Pydio version 8, which stems from a lack of proper validation of client-side data by the WEB...

5.4CVSS6.5AI score0.00675EPSS
SaveExploits3References1
n0where
n0where
added 2018/05/31 6:56 p.m.58 views

File System Crawler: diskover

diskover is an open source file system crawler and disk space usage software that uses Elasticsearch to index and manage data across heterogeneous storage systems. Using diskover, you are able to more effectively search and organize files and system administrators are able to manage storage...

SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2017/07/19 1:29 p.m.5 views

CVE-2016-7509

Cross-site scripting XSS vulnerability in GLPI 0.90.4 allows remote authenticated attackers to inject arbitrary web script or HTML by attaching a crafted HTML file to a ticket...

5.4CVSS5.7AI score0.00637EPSS
SaveExploits0References2
Rows per page
Query Builder