CVE:CVE-2020-28874
CNNVD:CNNVD-202101-2327
ProjectSend（前称cFTP）是一套基于PHP和MySQL的自托管应用程序。
ProjectSend before r1295 存在安全漏洞，该漏洞错误的业务逻辑而重置密码。
solution:Upgrade projectsend projectsend to a higher version than r1295,and avoid the version (,r1295)