CVE-2019-19670

CVE-2019-19670 affects the Web Settings component of the Web File Manager in Rumpus FTP Server 8.2.9.1. The issue is an HTTP Response Splitting vulnerability that can enable stored XSS and defacement through crafted headers sent to RAPR/WebSettingsGeneralSet.html. Multiple connected sources corro...

CVE-2019-19667

CVE-2019-19667 describes a CSRF flaw in the Block Clients component of Web File Manager for Rumpus FTP 8.2.9.1. The vulnerability could let an attacker cause a target server to whitelist or block arbitrary IP addresses via the RAPR/BlockedClients.html interface. Affected product is Rumpus FTP’s W...

CVE-2019-19662

CVE-2019-19662 describes a cross-site request forgery (CSRF) in the Web File Manager of Rumpus FTP Server 8.2.9.1. The vulnerability affects the Create/Delete Accounts functionality and allows an attacker to cause account creation and deletion via the URL path RAPR/TriggerServerFunction.html. The...

CVE-2019-19661

CVE-2019-19661 describes a cookie-based reflected XSS in the Web File Manager of Rumpus FTP Server 8.2.9.1, linked to RumpusLoginUserName and snp. Multiple connected records (RH, CNVD, NVD, PRION, CVELIST) corroborate the same issue and product/version, providing consistent description of the vul...

CVE-2019-19668

CVE-2019-19668 concerns a CSRF vulnerability in the File Types component of Web File Manager used by Rumpus FTP 8.2.9.1. The issue arises from requests made via RAPR/TriggerServerFunction.html that enable an attacker to add or delete file types configured on the server. Affected product features ...

CVE-2019-19669

CVE-2019-19669 affects Rumpus FTP 8.2.9.1 through the Web File Manager’s Upload Center Forms Component. The CSRF vulnerability allows an attacker to delete, create, and update upload forms via the RAPR/TriggerServerFunction.html endpoint. The affected functionality is the Upload Center Forms Comp...

CVE-2019-19666

CVE-2019-19666 describes a Cross-Site Request Forgery (CSRF) vulnerability in the Event Notices Settings of Web File Manager in Rumpus FTP 8.2.9.1. An attacker can create or update event notices via the URL RAPR/EventNoticesSet.html. The connected Red Hat, CNVD/CVE records corroborate the same de...

CVE-2019-19664

CVE-2019-19664 is a CSRF vulnerability in the Web Settings feature of the Web File Manager in Rumpus FTP 8.2.9.1 . Exploitation could allow an attacker to manipulate server web settings via the URL path RAPR/WebSettingsGeneralSet.html . Affected product: Rumpus FTP Web File Manager (v8.2.9.1). Ro...