ProPhoenix Law RMS Insecure Direct Object Reference Vulnerability

ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an Insecure Direct Object Reference (IDOR) vulnerability.

The flaw exists via the usrLogin$hdnPFID parameter, allowing attackers to access sensitive information through a crafted HTTP request.

• Affected version: v2022.2403.3.101
• Attack vector: crafted HTTP request
• Impact: unauthorized access to sensitive information