CVE-2018-16606: Proconf

Medium severity, CVSS 6.5. EPSS: 5.9% chance of exploitation in the next 30 days.

In ProConf before 6.1, an Insecure Direct Object Reference (IDOR) allows any author to view and grab all submitted papers (Title and Abstract) and their authors' personal information (Name, Email, Organization, and Position) by changing the value of Paper ID (the pid parameter).

Affected products

• Proconf Proconf: before 6.1 (fixed in 6.1)

Published 2018-09-06. Last modified 2026-06-17.