CVE-2016-10733
ProjectSend (formerly cFTP) r582 allows directory traversal via file=../ in the process-zip-download.php query string.
Published: 2018-10-28 · CVSS: Unscored
ProjectSend (formerly cFTP) r582 allows directory traversal via file=../ in the process-zip-download.php query string.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7