Maxum Rumpus 8.2.9.1

CPE Details

Maxum Rumpus 8.2.9.1
maxum
rumpus
8.2.9.1
2019-12-26
14h54 +00:00
2019-12-26
14h54 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:maxum:rumpus:8.2.9.1:*:*:*:*:*:*:*

Informations

Vendor

maxum

Product

rumpus

Version

8.2.9.1

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2022-39187 2023-01-12 00h00 +00:00 Rumpus - FTP server version 9.0.7.1 has a Reflected cross-site scripting (RXSS) vulnerability through unspecified vectors.
6.8
Moyen
CVE-2022-46367 2023-01-12 00h00 +00:00 Rumpus - FTP server Cross-site request forgery (CSRF) – Privilege escalation vulnerability that may allow privilege escalation.
8.8
Haute
CVE-2022-46368 2023-01-12 00h00 +00:00 Rumpus - FTP server version 9.0.7.1 Cross-site request forgery (CSRF) – vulnerability may allow unauthorized action on behalf of authenticated users.
8.8
Haute
CVE-2022-46369 2023-01-12 00h00 +00:00 Rumpus - FTP server version 9.0.7.1 Persistent cross-site scripting (PXSS) – vulnerability may allow inserting scripts into unspecified input fields.
6.8
Moyen
CVE-2022-46370 2023-01-12 00h00 +00:00 Rumpus - FTP server version 9.0.7.1 Improper Token Verification– vulnerability may allow bypassing identity verification.
7.5
Haute
CVE-2019-19665 2020-02-10 15h00 +00:00 A CSRF vulnerability exists in the FTP Settings of Web File Manager in Rumpus FTP 8.2.9.1. Exploitation of this vulnerability can result in manipulation of Server FTP settings at RAPR/FTPSettingsSet.html.
6.5
Moyen
CVE-2019-19663 2020-02-10 14h54 +00:00 A CSRF vulnerability exists in the Folder Sets Settings of Web File Manager in Rumpus FTP 8.2.9.1. This allows an attacker to Create/Delete Folders after exploiting it at RAPR/FolderSetsSet.html.
6.5
Moyen
CVE-2019-19659 2020-02-10 14h48 +00:00 A CSRF vulnerability exists in the Web File Manager's Edit Accounts functionality of Rumpus FTP Server 8.2.9.1. By exploiting it, an attacker can take over a user account by changing the password, update users' details, and escalate privileges via RAPR/DefineUsersSet.html.
8.8
Haute
CVE-2019-19660 2020-02-10 14h39 +00:00 A CSRF vulnerability exists in the Web File Manager's Network Setting functionality of Rumpus FTP Server 8.2.9.1. By exploiting it, an attacker can manipulate the SMTP setting and other network settings via RAPR/NetworkSettingsSet.html.
6.5
Moyen
CVE-2019-19368 2019-12-16 14h55 +00:00 A Reflected Cross Site Scripting was discovered in the Login page of Rumpus FTP Web File Manager 8.2.9.1. An attacker can exploit it by sending a crafted link to end users and can execute arbitrary Javascripts
6.1
Moyen
Les informations affichées sur CVE Find proviennent de plusieurs sources de référence rigoureusement sélectionnées. Les données CVE sont fournies par MITRE Corporation et la National Vulnerability Database (NVD). Le catalogue des vulnérabilités activement exploitées (KEV) provient de la Cybersecurity and Infrastructure Security Agency (CISA), tandis que les scores EPSS sont issus de FIRST.org. Enfin, les données relatives aux faiblesses logicielles (CWE) et aux schémas d'attaque courants (CAPEC) sont maintenues par MITRE Corporation, et les informations sur les configurations logicielles et matérielles (CPE) proviennent du NVD.