CVE-2017-20101

MediumCVSS 5.7/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as problematic, was found in ProjectSend r754. This affects an unknown part of the file process.php?do=zip_download. The manipulation of the argument client/file leads to information disclosure. It is possible to initiate the attack remotely.

Metrics

CVSS 3.1 5.7/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200 CWE-639

Affected software

Vendor	Product	Versions
unspecified	ProjectSend	r754

References

http://seclists.org/fulldisclosure/2017/Feb/58Exploit, Mailing List, Third Party Advisory
https://vuldb.com/?id.97275Third Party Advisory
https://youtu.be/Xc6Jg9I7Pj4Exploit, Third Party Advisory
http://seclists.org/fulldisclosure/2017/Feb/58Exploit, Mailing List, Third Party Advisory
https://vuldb.com/?id.97275Third Party Advisory
https://youtu.be/Xc6Jg9I7Pj4Exploit, Third Party Advisory

Timeline

Published: Jun 27, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-201025.5A vulnerability was found in Album Lock 4.0 and classified as critical. Affected by this issue is some unknown functionality of the file /ge CVE-2017-201038.8A vulnerability classified as critical has been found in Kama Click Counter Plugin up to 3.4.8. This affects an unknown part of the file wp-CVE-2017-201047.5A vulnerability was found in Simplessus 3.7.7. It has been declared as critical. This vulnerability affects unknown code of the component Co CVE-2017-201058.1A vulnerability was found in Simplessus 3.7.7. It has been rated as critical. This issue affects some unknown processing. The manipulation o CVE-2017-201064.4A vulnerability, which was classified as critical, has been found in Lithium Forum 2017 Q1. This issue affects some unknown processing of th CVE-2017-201077.8A vulnerability, which was classified as problematic, was found in ShadeYouVPN.com Client 2.0.1.11. Affected is an unknown function. The man CVE-2017-201085.4A vulnerability classified as problematic has been found in Easy Table Plugin 1.6. This affects an unknown part of the file /wordpress/wp-ad CVE-2017-201096.5A vulnerability classified as problematic was found in Teleopti WFM up to 7.1.0. Affected by this vulnerability is an unknown functionality CVE-2017-201107.5A vulnerability, which was classified as problematic, has been found in Teleopti WFM up to 7.1.0. Affected by this issue is some unknown fun CVE-2017-201119.8A vulnerability, which was classified as critical, was found in Teleopti WFM 7.1.0. This affects an unknown part of the component Administra CVE-2017-201127.8A vulnerability has been found in IVPN Client 2.6.6120.33863 and classified as critical. Affected by this vulnerability is an unknown functi CVE-2017-201135.4A vulnerability, which was classified as problematic, was found in TrueConf Server 4.3.7. This affects an unknown part. The manipulation lea