Security Advisory
CVE-2015-2564
6.5
Vulnerability Description
SQL injection vulnerability in client-edit.php in ProjectSend (formerly cFTP) r561 allows remote authenticated users to execute arbitrary SQL commands via the id parameter to users-edit.php.
Published Date
March 20, 2015
Official Source
NIST NVD Advisory