Security ProjectSend r754 Insecure Direct Object Reference / Authenticaton Bypass February 23, 2017 007admin Leave a comment ProjectSend r754 suffers from authentication bypass and insecure direct object reference vulnerabilities.