Vulnerability in Bugada Andrea PHP Advanced Transfer Manager
CVE-2005-1681
PHP remote file inclusion vulnerability in common.php in phpATM 1.21, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code via a URL in the include_location parameter to index.php.
EPSS: 0.066 (93.1th percentile) — read the EPSS interpretation.
Affected products
- Bugada_andrea Php_advanced_transfer_manager — versions 1.20, 1.21
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)