CVE-2005-1604 PHP Advanced Transfer Manager (phpATM) 1.21 allows remote attackers to upload arbitrary files via filenames containing multiple file extensions, as demonstrated using a filename ending in "php.ns", wh...
HighCVSS 7.5
EPSS 5.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP Advanced Transfer Manager (phpATM) 1.21 allows remote attackers to upload arbitrary files via filenames containing multiple file extensions, as demonstrated using a filename ending in "php.ns", which allows execution of arbitrary PHP code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bugada andrea php advanced transfer manager | = 1.21 | No fix listed |
References
- 20050506 PHP Advanced Transfer Manager v1.21 exploit mailing-list
- 15279 third-party-advisory
- 16160 vdb-entry
- 20051029 uplod phpshell in PHP Advanced Transfer Manager mailing-list
- 20051030 Re: uplod phpshell in PHP Advanced Transfer Manager mailing-list
- 13542 exploit vdb-entry