CVE-2015-2564
SQL injection vulnerability in client-edit.php in ProjectSend (formerly cFTP) r561 allows remote authenticated users to execute arbitrary SQL commands via the id parameter to users-edit.php.
Date published : 2015-03-20
http://www.securityfocus.com/archive/1/534832/100/0/threaded