CVE-2006-1209

PHP Advanced Transfer Manager <1.31 - Info Disclosure

Title source: llm

Description

PHP Advanced Transfer Manager 1.00 through 1.30 stores sensitive information, including password hashes, under the web root with insufficient access control, which allows remote attackers to download each password hash via a direct request for a users/[USERNAME] file.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Kacper · phpwebappsphp

https://www.exploit-db.com/exploits/2968

View Code ZIP pw:eip

References (7)

[Exploit] http://biyosecurity.be/bugs/patm.txt

[Exploit, URL Repurposed] http://www.blogcu.com/Liz0ziM/316652/

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/25127

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/427216/100/0/threaded

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/437513/100/200/threaded

[Third Party Advisory] http://secunia.com/advisories/17134

[Third Party Advisory] http://securityreason.com/securityalert/565

Scores

EPSS 0.0849

EPSS Percentile 92.4%

Details

Status published

Products (8)

bugada_andrea/php_advanced_transfer_manager 1.00

bugada_andrea/php_advanced_transfer_manager 1.01

bugada_andrea/php_advanced_transfer_manager 1.02

bugada_andrea/php_advanced_transfer_manager 1.03

bugada_andrea/php_advanced_transfer_manager 1.20

bugada_andrea/php_advanced_transfer_manager 1.21

bugada_andrea/php_advanced_transfer_manager 1.22

bugada_andrea/php_advanced_transfer_manager 1.30

Published Mar 14, 2006

Tracked Since Feb 18, 2026