CVE-2024-34323

ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an Insecure Direct Object Reference IDOR via the usrLogin$hdnPFID parameter. This vulnerability allows attackers to access sensitive information via a crafted HTTP request...

CVE-2024-34323

ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an Insecure Direct Object Reference IDOR via the usrLogin$hdnPFID parameter. This vulnerability allows attackers to access sensitive information via a crafted HTTP request...

PT-2026-111636

Name of the Vulnerable Software and Affected Versions ProPhoenix Law RMS version 2022.2403.3.101 Description An Insecure Direct Object Reference IDOR exists, which is a type of access control flaw where an application provides direct access to objects based on user-supplied input. This allows...

CVE-2024-34323

ProPhoenix Law RMS v2022.2403.3.101 is vulnerable to an Insecure Direct Object Reference (IDOR) via the usrLogin$hdnPFID parameter. This flaw allows an attacker to perform a crafted HTTP request to gain unauthorized access to sensitive information . The vulnerability is associated with CWE-639 (A...

EUVD-2024-55795

ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an Insecure Direct Object Reference IDOR via the usrLogin$hdnPFID parameter. This vulnerability allows attackers to access sensitive information via a crafted HTTP request...

CVE-2024-34323: Authorization Bypass Through User-Controlled Key

ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an Insecure Direct Object Reference IDOR via the usrLogin$hdnPFID parameter. This vulnerability allows attackers to access sensitive information via a crafted HTTP request...

CVE-2024-34323

ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an Insecure Direct Object Reference IDOR via the usrLogin$hdnPFID parameter. This vulnerability allows attackers to access sensitive information via a crafted HTTP request...

ProPhoenix Law Records Management Software Authorization Issues Vulnerabilities

ProPhoenix Law Records Management Software 2022.2403.3.101 version has an authorization issue vulnerability. This vulnerability stems from an insecure direct object reference in the usrLogin$hdnPFID parameter, which may allow attackers to access sensitive information through specially crafted HTT...