4 matches found
CVE-2016-10734
ProjectSend formerly cFTP r582 allows Insecure Direct Object Reference via includes/actions.log.export.php...
9.8CVSS9.5AI score0.01545EPSS
SaveExploits0References1
Authentication flaw
ProjectSend formerly cFTP r582 allows Insecure Direct Object Reference via includes/actions.log.export.php...
7.5CVSS7.1AI score0.01545EPSS
SaveExploits0References1Affected Software1
CVE-2016-10734
ProjectSend (formerly cFTP) r582 contains an Insecure Direct Object Reference vulnerability in includes/actions.log.export.php. The CNVD entry notes that ProjectSend is a PHP/MySQL self-hosted application, and the NVD entry documents a high-impact issue with access control to object references. T...
9.8CVSS9.3AI score0.01545EPSS
SaveExploits0References1Affected Software1
20