CVE-2006-4594

Affected product/versions: PHP Advanced Transfer Manager (phpATM) 1.21 and earlier. Vulnerability: Multiple remote PHP file inclusion via the include_location parameter in (1) confirm.php and (2) login.php, allowing remote code execution. The index.php vector is already covered by CVE-2005-1681. ...

CVE-2006-4594

Multiple PHP remote file inclusion vulnerabilities in PHP Advanced Transfer Manager phpAtm 1.21 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the includelocation parameter in 1 confirm.php or 2 login.php. NOTE: the includelocation parameter to index.php is already...

CVE-2006-4594: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in PHP Advanced Transfer Manager phpAtm 1.21 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the includelocation parameter in 1 confirm.php or 2 login.php. NOTE: the includelocation parameter to index.php is already...

phpAtm <= 1.21 (include_location) Remote File Include Vulnerabilities

phpAtm = v1.21 includelocation Remote File Inclusion Exploit Level : Dangerous Download : http://phpatm.free.fr/ Version : v1.21 Found By: KinSize MHG Security Team Code : include$includelocation.'include/conf.php'; exploit:...

phpAtm <= 1.21 (include_location) Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications ===================================================================== phpAtm = 1.21 includelocation Remote File Include Vulnerabilities ===================================================================== phpAtm = v1.21 includelocation...

phpAtm &lt;= 1.21 (include_location) Remote File Include Vulnerabilities

No description provided by source. phpAtm = v1.21 includelocation Remote File Inclusion Exploit Level : Dangerous Download : http://phpatm.free.fr/ Version : v1.21 Found By: KinSize MHG Security Team Code : include$includelocation.'include/conf.php'; exploit:...

phpAtm 1.21 - include_location Remote File Inclusion

phpAtm 1.21 - includelocation Remote File Inclusion phpAtm = v1.21 includelocation Remote File Inclusion Exploit Level : Dangerous Download : http://phpatm.free.fr/ Version : v1.21 Found By: KinSize MHG Security Team Code : include$includelocation.'include/conf.php'; exploit:...

phpAtm 1.21 - 'include_location' Remote File Inclusion

phpAtm = v1.21 includelocation Remote File Inclusion Exploit Level : Dangerous Download : http://phpatm.free.fr/ Version : v1.21 Found By: KinSize MHG Security Team Code : include$includelocation.'include/conf.php'; exploit:...

phpATMinclude.txt

Affected product: phpATM Version vulnerable: 1.21, and probably earlier. Risk: High, execution of arbitrary PHP Vendor informed: Not possible mail bounces with 550, tried twice Vendor URL: http://phpatm.free.fr/ phpATM seems to be some up-/downloadscript for web environments. The discussed...

CVE-2005-1681

CVE-2005-1681 affects phpATM 1.21 (and possibly earlier) where a PHP remote file inclusion flaw in common.php allows an attacker to execute arbitrary PHP code via a URL in the include_location parameter to index.php. The vulnerability (root cause: include_location-driven RFI in index.php) enables...

CVE-2005-1681: Undefined Security Weakness

PHP remote file inclusion vulnerability in common.php in phpATM 1.21, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code via a URL in the includelocation parameter to index.php...

CVE-2005-1681

PHP remote file inclusion vulnerability in common.php in phpATM 1.21, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code via a URL in the includelocation parameter to index.php...

phpATM arbitrary PHP code inclusion

Affected product: phpATM Version vulnerable: 1.21, and probably earlier. Risk: High, execution of arbitrary PHP Vendor informed: Not possible mail bounces with 550, tried twice Vendor URL: http://phpatm.free.fr/ phpATM seems to be some up-/downloadscript for web environments. The discussed...

CVE-2005-1604

CVE-2005-1604 affects PHP Advanced Transfer Manager (phpATM) 1.21. The vulnerability allows remote attackers to upload arbitrary files by crafting a filename with multiple extensions (e.g., ending in php.ns), enabling execution of arbitrary PHP code on the server. Connected sources corroborate a ...

CVE-2005-1604: Undefined Security Weakness

PHP Advanced Transfer Manager phpATM 1.21 allows remote attackers to upload arbitrary files via filenames containing multiple file extensions, as demonstrated using a filename ending in "php.ns", which allows execution of arbitrary PHP code...