Exploitation Summary
EIP tracks 2 public exploits for CVE-2019-19368. PoCs published by Harshit Shukla. A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit demonstrates a reflected XSS vulnerability in Rumpus FTP Web File Manager 8.2.9.1. The payload is injected via the URL parameter, triggering an alert upon page load.
Description
A Reflected Cross Site Scripting was discovered in the Login page of Rumpus FTP Web File Manager 8.2.9.1. An attacker can exploit it by sending a crafted link to end users and can execute arbitrary Javascripts
Exploits (2)
This exploit demonstrates a reflected XSS vulnerability in Rumpus FTP Web File Manager 8.2.9.1. The payload is injected via the URL parameter, triggering an alert upon page load.
This repository contains detailed technical writeups for multiple CVEs affecting Rumpus FTP Web File Manager, including XSS, CSRF, and privilege escalation vulnerabilities. Each file provides descriptions, payloads, and exploitation methods without functional exploit code.
Nuclei Templates (1)
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N