EIP-2026-110643

PRE-CVE

PHP Advanced Transfer Manager 1.30 - Multiple Directory Traversal Vulnerabilities

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-110643. PoCs published by rgod.

AI-analyzed exploit summary This exploit demonstrates directory traversal vulnerabilities in PHP Advanced Transfer Manager, allowing unauthorized access to sensitive files via crafted URLs. The PoC includes multiple attack vectors targeting different file viewers.

Description

PHP Advanced Transfer Manager 1.30 - Multiple Directory Traversal Vulnerabilities

Exploits (1)

exploitdb WORKING POC VERIFIED
by rgod · textwebappsphp
https://www.exploit-db.com/exploits/26286

This exploit demonstrates directory traversal vulnerabilities in PHP Advanced Transfer Manager, allowing unauthorized access to sensitive files via crafted URLs. The PoC includes multiple attack vectors targeting different file viewers.

Classification
Working Poc 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: PHP Advanced Transfer Manager
No auth needed
Prerequisites: Network access to the target application
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026