EUVD-2005-1683

Malware in sbrugna...

phpATM 1.32 Cross Site Request Forgery / Path Disclosure

!-- Exploit Title : "phpATM = 1.32 Multiple CSRF Vulnerabilities & Full Path Disclosure Vulnerability" Date : 17/06/2016 Author : Paolo Massenio - pmassenioATgmail Vendor : phpATM - http://phpatm.org/ Version : = 1.32 Tested on : Windows 10 with XAMPP 1 CSRF in configure.php phpATM lets the...

phpATM 1.32 - Multiple Vulnerabilities

phpATM 1.32 - Multiple Vulnerabilities !-- Exploit Title : "phpATM = 1.32 Multiple CSRF Vulnerabilities & Full Path Disclosure Vulnerability" Date : 17/06/2016 Author : Paolo Massenio - pmassenioATgmail Vendor : phpATM - http://phpatm.org/ Version : = 1.32 Tested on : Windows 10 with XAMPP 1 CSRF...

phpATM 1.32 Remote Command Execution / Shell Upload

?php / Exploit Title : "phpATM = 1.32 Remote Command Execution Shell Upload on Windows Servers" Date : 17/06/2016 Author : Paolo Massenio - pmassenioATgmail Vendor : phpATM - http://phpatm.org/ Version : = 1.32 Tested on : Windows 10 with XAMPP PoF "phpATM is the acronym for PHP Advanced Transfer...

phpATM 1.32 - Multiple Vulnerabilities

Exploit for php platform in category web applications !-- Exploit Title : "phpATM = 1.32 Multiple CSRF Vulnerabilities & Full Path Disclosure Vulnerability" Date : 17/06/2016 Author : Paolo Massenio - pmassenioATgmail Vendor : phpATM - http://phpatm.org/ Version : = 1.32 Tested on : Windows 10 wi...

phpATM 1.32 - Multiple Vulnerabilities

!-- Exploit Title : "phpATM = 1.32 Multiple CSRF Vulnerabilities & Full Path Disclosure Vulnerability" Date : 17/06/2016 Author : Paolo Massenio - pmassenioATgmail Vendor : phpATM - http://phpatm.org/ Version : = 1.32 Tested on : Windows 10 with XAMPP 1 CSRF in configure.php phpATM lets the...

phpATM 1.32 - Arbitrary File Upload / Remote Command Execution (Windows Servers)

Exploit for php platform in category web applications ?php / Exploit Title : "phpATM = 1.32 Remote Command Execution Shell Upload on Windows Servers" Date : 17/06/2016 Author : Paolo Massenio - pmassenioATgmail Vendor : phpATM - http://phpatm.org/ Version : = 1.32 Tested on : Windows 10 with XAMP...

phpATM 1.32 (Windows) - Arbitrary File Upload Remote Command Execution

phpATM 1.32 Windows - Arbitrary File Upload Remote Command Execution ?php / Exploit Title : "phpATM = 1.32 Remote Command Execution Shell Upload on Windows Servers" Date : 17/06/2016 Author : Paolo Massenio - pmassenioATgmail Vendor : phpATM - http://phpatm.org/ Version : = 1.32 Tested on : Windo...

phpATM 1.32 (Windows) - Arbitrary File Upload / Remote Command Execution

?php / Exploit Title : "phpATM = 1.32 Remote Command Execution Shell Upload on Windows Servers" Date : 17/06/2016 Author : Paolo Massenio - pmassenioATgmail Vendor : phpATM - http://phpatm.org/ Version : = 1.32 Tested on : Windows 10 with XAMPP PoF "phpATM is the acronym for PHP Advanced Transfer...

phpAtm <= 1.21 (include_location) Remote File Include Vulnerabilities

No description provided by source. phpAtm = v1.21 includelocation Remote File Inclusion Exploit Level : Dangerous Download : http://phpatm.free.fr/ Version : v1.21 Found By: KinSize MHG Security Team Code : include$includelocation.'include/conf.php'; exploit:...

phpatm-rfi.txt

download page in : http://phpatm.free.fr/ bug in : phpatm injection attack : index.php?action=downloadfile&filename=index.php&directory=../& Dork in google : "powered by php advanced transfer manager" example :...

CVE-2007-2659

Directory traversal vulnerability in index.php in PHP Advanced Transfer Manager phpATM 1.30 allows remote attackers to read arbitrary files and obtain script source code via a .. dot dot in the directory parameter in a downloadfile action...

CVE-2007-2659

CVE-2007-2659 describes a directory traversal vulnerability in PHP Advanced Transfer Manager (phpATM) v1.30. The flaw is in the index.php file, in the downloadfile action, where an attacker can manipulate the directory parameter using ".." to access arbitrary files, potentially exposing script so...

CVE-2007-2659: Undefined Security Weakness

Directory traversal vulnerability in index.php in PHP Advanced Transfer Manager phpATM 1.30 allows remote attackers to read arbitrary files and obtain script source code via a .. dot dot in the directory parameter in a downloadfile action...

phpAtm 1.30 - downloadfile Remote File Disclosure

phpAtm 1.30 - downloadfile Remote File Disclosure download page in : http://phpatm.free.fr/ bug in : phpatm injection attack : index.php?action=downloadfile&filename=index.php&directory=../& Dork in google : "powered by php advanced transfer manager" example :...

phpAtm 1.30 (downloadfile) Remote File Disclosure Vulnerability

No description provided by source. download page in : http://phpatm.free.fr/ bug in : phpatm injection attack : index.php?action=downloadfile&filename=index.php&directory=../& Dork in google : "powered by php advanced transfer manager" example :...

phpAtm 1.30 (downloadfile) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications =============================================================== phpAtm 1.30 downloadfile Remote File Disclosure Vulnerability =============================================================== download page in : http://phpatm.free.fr/ bug in ...

phpAtm 1.30 - 'downloadfile' Remote File Disclosure

download page in : http://phpatm.free.fr/ bug in : phpatm injection attack : index.php?action=downloadfile&filename=index.php&directory=../& Dork in google : "powered by php advanced transfer manager" example :...

CVE-2006-4749

CVE-2006-4749 describes multiple PHP remote file inclusion vulnerabilities in PHP Advanced Transfer Manager (phpATM) 1.20 and earlier. The flaw allows remote attackers to execute arbitrary PHP code via the include_location parameter in files including activate.php, configure.php, fileop.php, geti...

CVE-2006-4749: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in PHP Advanced Transfer Manager phpATM 1.20 allow remote attackers to execute arbitrary PHP code via the includelocation parameter in 1 activate.php, 2 configure.php, 3 fileop.php, 4 getimg.php, 5 ipblocked.php, 6 register.php, 7 showrecent.php,...