Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-1209. PoCs published by Kacper.
AI-analyzed exploit summary This exploit leverages a directory traversal vulnerability in PHP Advanced Transfer Manager <= 1.30 to disclose source code by accessing files in the 'users' directory or via the 'viewers' scripts with manipulated 'current_dir' and 'filename' parameters.
Description
PHP Advanced Transfer Manager 1.00 through 1.30 stores sensitive information, including password hashes, under the web root with insufficient access control, which allows remote attackers to download each password hash via a direct request for a users/[USERNAME] file.
Exploits (1)
This exploit leverages a directory traversal vulnerability in PHP Advanced Transfer Manager <= 1.30 to disclose source code by accessing files in the 'users' directory or via the 'viewers' scripts with manipulated 'current_dir' and 'filename' parameters.