CVE-2005-2997

CVE-2005-2997 affects PHP Advanced Transfer Manager 1.30. The vulnerability is a directory traversal flaw allowing remote attackers to read arbitrary files via .. sequences in the following parameters: currentdir to txt.php, current_dir to htm.php, or current_dir to html.php. This results in pote...

CVE-2006-1209

The CVE concerns PHP Advanced Transfer Manager (versions 1.00–1.30). The root cause is insufficient access control that stores sensitive data (including password hashes) under the web root. This enables remote attackers to retrieve password hashes by directly requesting a users/[USERNAME] file. C...

CVE-2005-2999

Technical details about CVE-2005-2999 are not publicly provided in the supplied documents. Monitor for updates from official advisories for affected products, impact, and remediation.

CVE-2007-2659

CVE-2007-2659 describes a directory traversal vulnerability in PHP Advanced Transfer Manager (phpATM) v1.30. The flaw is in the index.php file, in the downloadfile action, where an attacker can manipulate the directory parameter using ".." to access arbitrary files, potentially exposing script so...