.. / CVE-2019-19368

Exploit for Rumpus FTP Web File Manager 8.2.9.1 - Cross-Site Scripting (CVE-2019-19368)

Description:

Rumpus FTP Web File Manager 8.2.9.1 contains a reflected cross-site scripting vulnerability via the Login page. An attacker can send a crafted link to end users and can execute arbitrary JavaScript.

Nuclei Template

View the template here CVE-2019-19368.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2019/CVE-2019-19368.yaml
Copy

References:

https://github.com/harshit-shukla/CVE-2019-19368/
http://packetstormsecurity.com/files/155719/Rumpus-FTP-Web-File-Manager-8.2.9.1-Cross-Site-Scripting.html
https://www.maxum.com/Rumpus/Download.html
https://nvd.nist.gov/vuln/detail/CVE-2019-19368
https://github.com/ARPSyndicate/kenzer-templates