CVE-2016-10731

creationtimestamp| type| source ---|---|--- 2018-10-29 15:23:22+00:00| seen| https://t.me/cibsecurity/906...

CVE-2016-10731

CVE-2016-10731 affects ProjectSend (formerly cFTP) r582 and enables SQL injection via multiple PHP endpoints: manage-files.php (status, files), clients.php (selected_clients, status), process-zip-download.php (file), or home-log.php (action). Root cause: input parameters are used in SQL queries w...