CVE-2020-12737

CVE-2020-12737 affects Maxum Rumpus on macOS prior to version 8.2.12. The issue is a path traversal vulnerability where authenticated users can use double-escaped characters to read arbitrary files on the server. Impact is read access to sensitive files; no other compromises are specified. Remedi...

CVE-2020-8514

CVE-2020-8514 concerns Rumpus 8.2.10 on macOS, where crafting a directory name can trigger a JavaScript payload in the web app after invoking the rename folder function, effectively a cross-site scripting issue in the web interface. The documents collectively indicate an XSS scenario in the Maxum...

CVE-2019-19368

Rumpus FTP Web File Manager 8.2.9.1 is affected by a reflected Cross‑Site Scripting vulnerability on the Login page. An attacker can entice a user to click a crafted link, enabling execution of arbitrary JavaScript in the victim’s browser (potential session hijacking/defacement or data theft). Ro...

CVE-2022-46369

CVE-2022-46369 affects Rumpus FTP server, specifically version 9.0.7.1. The issue is described as a persistent cross-site scripting (PXSS) vulnerability that may allow inserting scripts into unspecified input fields. Multiple connected sources corroborate this vector and the affected product/vers...

CVE-2019-19659

CVE-2019-19659 concerns a CSRF vulnerability in the Web File Manager’s Edit Accounts functionality of Rumpus FTP Server 8.2.9.1. The issue allows an attacker to modify a user password and update user details, enabling privilege escalation via RAPR/DefineUsersSet.html. Documents consistently descr...

CVE-2019-19660

The CVE-2019-19660 entry concerns a CSRF vulnerability in the Web File Manager’s Network Settings of Rumpus FTP Server 8.2.9.1 . The issue allows an attacker to manipulate settings such as the SMTP value and other network parameters via RAPR/NetworkSettingsSet.html . Affected component is the Web...

CVE-2022-46368

CVE-2022-46368 – Rumpus FTP server 9.0.7.1 suffers a Cross-site Request Forgery (CSRF) vulnerability that may allow unauthorized actions on behalf of authenticated users. The issue is documented across multiple sources (NVD, CNNVD, CVE List) with the impact described as enabling unauthorized acti...

CVE-2019-19665

A CSRF vulnerability exists in the FTP Settings component of Web File Manager in Rumpus FTP 8.2.9.1. Exploitation can manipulate server FTP settings via RAPR/FTPSettingsSet.html. The CVE records consistently describe the flaw across multiple feeds (Red Hat, CNVD, CVE.org listings) but do not prov...

CVE-2019-19663

CVE-2019-19663 concerns the Web File Manager’s Folder Sets Settings in Rumpus FTP 8.2.9.1. The issue is a Cross-Site Request Forgery (CSRF) vulnerability in the Folder Sets Settings page (RAPR/FolderSetsSet.html) that enables an attacker to create or delete folders. The affected product is Rumpus...

CVE-2020-27574

CVE-2020-27574 relates to a cross-site request forgery (CSRF) affecting Maxum Rumpus versions 8.2.13 and 8.2.14. The vulnerability allows an attacker to cause actions within the web application as an authenticated user when that user visits a malicious page. The available connected documents cons...

CVE-2022-46370

CVE-2022-46370 – Rumpus FTP server : The vulnerability in Rumpus version 9.0.7.1 stems from improper token verification, which may allow bypassing identity verification (authentication bypass). According to the sources, the issue enables an attacker to bypass login, with CVSS base scores indicati...

CVE-2020-27576

Maxum Rumpus 8.2.13 and 8.2.14 are affected by a stored cross-site scripting (XSS) vulnerability in the web UI when creating folders, caused by insufficient validation of folder names. The issue can allow injection and execution of JavaScript in the victim’s browser. Several sources (RH, CNVD, CV...

CVE-2022-46367

Technical details (affected product/versions/root cause/patch) are not publicly available in the provided documents. Monitor official advisories and CVE references for updates.

CVE-2008-7078

CVE-2008-7078 corresponds to multiple buffer overflows in Rumpus prior to 6.0.1. The NVD entries describe two vulnerable areas: (1) HTTP component vulnerability allowing remote denial of service via a long HTTP verb; and (2) FTP component vulnerability allowing remote authenticated users to execu...

CVE-2020-27575

Maxum Rumpus versions 8.2.13 and 8.2.14 are affected by a command injection vulnerability in the web admin Edit Users form, where an input parameter is vulnerably validated. Root cause: insufficient input validation in the Edit User parameter enables arbitrary command execution. Impact stated acr...

CVE-2022-39187

CVE-2022-39187 concerns Rumpus - FTP server 9.0.7.1 with a Reflected cross-site scripting (RXSS) vulnerability through unspecified vectors. Multiple connected sources corroborate RXSS in this version; details on vectors, exploitability, and affected components are not consistently provided across...

CVE-2025-55055

CVE-2025-55055 pertains to an OS command injection in Maxum Rumpus FTP Server 9.0.12, caused by improper neutralization of special elements. This could allow an attacker to execute arbitrary commands on the affected system. Public details about a fix are not provided in the connected documents; m...

CVE-2025-55056

CNNVD-202511-1880 reports CVE-2025-55056 as affecting Maxum Rumpus FTP Server, specifically version 9.0.12, with a cross-site scripting flaw caused by improper input neutralization during web page generation. The description notes XSS as the impact, but does not provide exploit details or a confi...

CVE-2025-55057

CVE-2025-55057 corresponds to multiple CSRF (CWE-352) vulnerabilities. NVD metrics indicate a HIGH impact (C/H/I/A all high) with CVSS 3.1 vector: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H; exploitation requires user interaction. Connected sources reiterate CSRF risk but do not specify affected product...

CVE-2025-55058

CVE-2025-55058 is tied to CWE-20 Improper Input Validation. Public records (NVD, Red Hat, EUVD, CVE list, CNNVD) cite an input validation error, with CNNVD naming Maxum Rumpus FTP Server as affected (version 9.0.12) in their entry. Evidence does not consistently specify vendor/product coverage ac...

CVE-2025-55059

CVE-2025-55059 is described across sources as a CWE-79 XSS due to improper input neutralization during web page generation. Connected documents provide concrete detail for Maxum Rumpus FTP Server, noting a vulnerability in version 9.0.12 (XSS via unneutralized input). Other entries (Red Hat, ENIS...