high7.5Public exploit code
CVE-2005-1604
PHP Advanced Transfer Manager (phpATM) 1.21 allows remote attackers to upload arbitrary files via filenames containing multiple file extensions, as demonstrate…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHP Advanced Transfer Manager 1.21 - Arbitrary File Upload2005-05-06 · remote · php · Verified
Impact
PHP Advanced Transfer Manager (phpATM) 1.21 allows remote attackers to upload arbitrary files via filenames containing multiple file extensions, as demonstrated using a filename ending in "php.ns", which allows execution of arbitrary PHP code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bugada Andrea | Php Advanced Transfer Manager | Version 1.21 |
References
- NVD record
- CVE.org record
- http://seclists.org/lists/bugtraq/2005/May/0075.html
- http://secunia.com/advisories/15279
- http://www.osvdb.org/16160
- http://www.securityfocus.com/archive/1/415172
- http://www.securityfocus.com/archive/1/415300/30/0/threaded
- http://www.securityfocus.com/bid/13542
- http://seclists.org/lists/bugtraq/2005/May/0075.html
- http://secunia.com/advisories/15279
- http://www.osvdb.org/16160
- http://www.securityfocus.com/archive/1/415172
- http://www.securityfocus.com/archive/1/415300/30/0/threaded
- http://www.securityfocus.com/bid/13542