PT-2014-3293

Name of the Vulnerable Software and Affected Versions Fat Free CRM versions prior to 0.12.1 Description The issue allows remote attackers to obtain sensitive information via a direct request. This is demonstrated by a request for "users/1.json", which is an API endpoint that is vulnerable due to...