critical9.8
CVE-2016-10734
ProjectSend (formerly cFTP) r582 allows Insecure Direct Object Reference via includes/actions.log.export.php.
Impact
ProjectSend (formerly cFTP) r582 allows Insecure Direct Object Reference via includes/actions.log.export.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Projectsend | Projectsend | Version 582 |