Vulnerability Causing Deletion of All Users in CrushFTP Admin Area

During a recent penetration test, Trustwave SpiderLabs researchers discovered a weak input validation vulnerability in the CrushFTP application which caused the deletion of all users.

application area deletion input input validation penetration penetration test researchers test trustwave trustwave spiderlabs validation vulnerability