critical9.8
CVE-2016-10733
ProjectSend (formerly cFTP) r582 allows directory traversal via file=../ in the process-zip-download.php query string.
Impact
ProjectSend (formerly cFTP) r582 allows directory traversal via file=../ in the process-zip-download.php query string.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Projectsend | Projectsend | Version 582 |