Approved changes feed: RSS · Atom

cpe:2.3:a:bugada_andrea:php_advanced_transfer_manager:1.21:*:*:*:*:*:*:*

part: a version: 1.21 update: *

VendorBugada Andrea (af65896f-91fb-5874-b67d-e95eb47137fc)
ProductPhp Advanced Transfer Manager (c2c839d3-495c-500e-8962-c7760564877e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-1209 vulnerable 2026-06-08 04:48:56.524315 Details available
PHP Advanced Transfer Manager 1.00 through 1.30 stores sensitive information, including password hashes, under the web root with insufficient access control, which allows remote attackers to download each password hash via a direct request for a users/[USERNAME] file.
Published: 2006-03-14T01:00:00.000Z
Updated: 2024-08-07T17:03:28.581Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1681 vulnerable 2026-06-08 04:48:27.189730 Details available
PHP remote file inclusion vulnerability in common.php in phpATM 1.21, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code via a URL in the include_location parameter to index.php.
Published: 2005-05-25T04:00:00.000Z
Updated: 2024-08-07T21:59:24.295Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1604 vulnerable 2026-06-08 04:48:27.003380 Details available
PHP Advanced Transfer Manager (phpATM) 1.21 allows remote attackers to upload arbitrary files via filenames containing multiple file extensions, as demonstrated using a filename ending in "php.ns", which allows execution of arbitrary PHP code.
Published: 2005-05-16T04:00:00.000Z
Updated: 2024-08-07T21:59:23.071Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.