GCVE - cpe:2.3:a:bugada_andrea:php_advanced_transfer

Approved changes feed: RSS · Atom

cpe:2.3:a:bugada_andrea:php_advanced_transfer_manager:1.30:*:*:*:*:*:*:*

part: a version: 1.30 update: *

Vendor	Bugada Andrea (`af65896f-91fb-5874-b67d-e95eb47137fc`)
Product	Php Advanced Transfer Manager (`c2c839d3-495c-500e-8962-c7760564877e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-2659`	vulnerable	2026-06-08 04:49:45.704048	Details available Directory traversal vulnerability in index.php in PHP Advanced Transfer Manager (phpATM) 1.30 allows remote attackers to read arbitrary files and obtain script source code via a .. (dot dot) in the directory parameter in a downloadfile action. Published: 2007-05-14T23:00:00.000Z Updated: 2024-08-07T13:49:56.689Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2007/1799 http://www.securityfocus.com/bid/23952 https://exchange.xforce.ibmcloud.com/vulnerabilities/34255 https://www.exploit-db.com/exploits/3918 http://osvdb.org/41990	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1209`	vulnerable	2026-06-08 04:48:56.525485	Details available PHP Advanced Transfer Manager 1.00 through 1.30 stores sensitive information, including password hashes, under the web root with insufficient access control, which allows remote attackers to download each password hash via a direct request for a users/[USERNAME] file. Published: 2006-03-14T01:00:00.000Z Updated: 2024-08-07T17:03:28.581Z Open on db.gcve.eu Reference links http://www.blogcu.com/Liz0ziM/316652/ http://www.securityfocus.com/archive/1/427216/100/0/threaded http://biyosecurity.be/bugs/patm.txt http://www.securityfocus.com/archive/1/437513/100/200/threaded http://securityreason.com/securityalert/565	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-3000`	vulnerable	2026-06-08 04:48:31.098110	Details available Multiple cross-site scripting (XSS) vulnerabilities in viewers/txt.php in PHP Advanced Transfer Manager 1.30 allow remote attackers to inject arbitrary web script or HTML via the (1) font, (2) normalfontcolor, or (3) mess[31] parameters. Published: 2005-09-20T04:00:00.000Z Updated: 2024-09-16T23:45:47.626Z Open on db.gcve.eu Reference links http://rgod.altervista.org/phpatm130.html http://secunia.com/advisories/16867	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-2999`	vulnerable	2026-06-08 04:48:31.097725	Details available PHP Advanced Transfer Manager 1.30 allows remote attackers to obtain sensitive PHP configuration information via a direct request to test.php. Published: 2005-09-20T04:00:00.000Z Updated: 2024-09-16T23:26:49.494Z Open on db.gcve.eu Reference links http://rgod.altervista.org/phpatm130.html http://secunia.com/advisories/16867	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-2998`	vulnerable	2026-06-08 04:48:31.097477	Details available PHP Advanced Transfer Manager 1.30 has a default password for the administrator user, which allows remote attackers to upload and execute arbitrary PHP files. Published: 2005-09-20T04:00:00.000Z Updated: 2024-09-17T02:52:27.035Z Open on db.gcve.eu Reference links http://rgod.altervista.org/phpatm130.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-2997`	vulnerable	2026-06-08 04:48:31.097156	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Php Advanced Transfer Manager

Notes

PURL mappings

Vulnerability references

Contribute