Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

bugada andrea php advanced transfer manager 1.20 vulnerabilities and exploits

(subscribe to this query)
505
VMScore
CVE-2006-1209
PHP Advanced Transfer Manager 1.00 up to and including 1.30 stores sensitive information, including password hashes, under the web root with insufficient access control, which allows remote malicious users to download each password hash via a direct request for a users/[USERNAME]...
Bugada Andrea Php Advanced Transfer Manager 1.00Bugada Andrea Php Advanced Transfer Manager 1.22Bugada Andrea Php Advanced Transfer Manager 1.21Bugada Andrea Php Advanced Transfer Manager 1.03Bugada Andrea Php Advanced Transfer Manager 1.20Bugada Andrea Php Advanced Transfer Manager 1.02Bugada Andrea Php Advanced Transfer Manager 1.01Bugada Andrea Php Advanced Transfer Manager 1.30
755
VMScore
CVE-2006-4594
Multiple PHP remote file inclusion vulnerabilities in PHP Advanced Transfer Manager (phpAtm) 1.21 and previous versions allow remote malicious users to execute arbitrary PHP code via a URL in the include_location parameter in (1) confirm.php or (2) login.php. NOTE: the include_lo...
Bugada Andrea Php Advanced Transfer Manager 1.20Bugada Andrea Php Advanced Transfer Manager
755
VMScore
CVE-2005-1681
PHP remote file inclusion vulnerability in common.php in phpATM 1.21, and possibly earlier versions, allows remote malicious users to execute arbitrary PHP code via a URL in the include_location parameter to index.php.
Bugada Andrea Php Advanced Transfer Manager 1.20Bugada Andrea Php Advanced Transfer Manager 1.21
755
VMScore
CVE-2006-4749
Multiple PHP remote file inclusion vulnerabilities in PHP Advanced Transfer Manager (phpATM) 1.20 allow remote malicious users to execute arbitrary PHP code via the include_location parameter in (1) activate.php, (2) configure.php, (3) fileop.php, (4) getimg.php, (5) ipblocked.ph...
Bugada Andrea Php Advanced Transfer Manager 1.20
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-7073CVE-2024-5496CVE-2024-5495XPath injectionbypassCVE-2024-30043CVE-2024-24919denial of serviceCVE-2024-35468
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook