PT-2005-3836 · Php · Php Advanced Transfer Manager

Publicado 2005-09-20 · Atualizado 2008-09-05 · CVE-2005-2999

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions PHP Advanced Transfer Manager version 1.30

Description The issue allows remote attackers to obtain sensitive PHP configuration information. This is achieved by making a direct request to the "test.php" endpoint.

Recommendations For PHP Advanced Transfer Manager version 1.30, consider restricting access to the "test.php" endpoint to prevent unauthorized disclosure of sensitive information.

Correção

Identificadores relacionados

CVE-2005-2999

Produtos afetados

Php Advanced Transfer Manager

Referências · 4

• http://secunia.com/advisories/16867 · Nota
• http://rgod.altervista.org/phpatm130.html · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2999 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-2999 · Nota de Segurança