CVE-2019-19368
43Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 26%
from disclosure to weapon2 days
Published on NVDDec 16
1st PoC+2d
exploitation probability
26%top 2% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
A Reflected Cross Site Scripting was discovered in the Login page of Rumpus FTP Web File Manager 8.2.9.1. An attacker can exploit it by sending a crafted link to end users and can execute arbitrary Javascripts
Affected products
n/a · n/apublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/47789unverifiedcve_referencepacketstormsecurity.com/files/155719/Rumpus-FTP-Web-File-Manager-8.2.9.1-Cross-Site-Scripting.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.