cve/CVE-2016-10733.md at 41fbf31e3d6076a9d40c80bb3e1e4187f08a58e2 - cve - 临风笛

admin/cve

mirror of https://github.com/0xMarcio/cve.git synced 2025-05-05 18:27:17 +00:00

0xMarcio 49bdc782b3 Update Sun May 26 14:27:04 CEST 2024

2024-05-26 14:27:05 +02:00

641 B

Raw Blame History

CVE-2016-10733

Description

ProjectSend (formerly cFTP) r582 allows directory traversal via file=../ in the process-zip-download.php query string.

POC

Reference

No PoCs from references.

Github