CVE-2024-34323

ProPhoenix Law RMS v2022.2403.3.101 is vulnerable to an Insecure Direct Object Reference (IDOR) via the usrLogin$hdnPFID parameter. This flaw allows an attacker to perform a crafted HTTP request to gain unauthorized access to sensitive information . The vulnerability is associated with CWE-639 (A...