Back to search
CVE-2007-2659
Published: May 14, 2007
Modified: Aug 7, 2024
PUBLISHED
Description
Directory traversal vulnerability in index.php in PHP Advanced Transfer Manager (phpATM) 1.30 allows remote attackers to read arbitrary files and obtain script source code via a .. (dot dot) in the directory parameter in a downloadfile action.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
ADV-2007-1799
vdb-entry
x_refsource_VUPEN
23952
vdb-entry
x_refsource_BID
phpatm-index-directory-traversal(34255)
vdb-entry
x_refsource_XF
3918
exploit
x_refsource_EXPLOIT-DB
41990
vdb-entry
x_refsource_OSVDB
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now