PT-2006-2225 · Php · Php Advanced Transfer Manager

Liz0 · Publicado 2006-03-14 · Atualizado 2024-02-14 · CVE-2006-1209

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions PHP Advanced Transfer Manager versions 1.00 through 1.30

Description The issue allows remote attackers to download sensitive information, including password hashes, due to insufficient access control. This is possible because the sensitive data is stored under the web root, making it accessible via a direct request for a "users/[USERNAME]" file.

Recommendations For PHP Advanced Transfer Manager versions 1.00 through 1.30, consider restricting access to the sensitive files stored under the web root to minimize the risk of exploitation. As a temporary workaround, limit direct requests to the "users/[USERNAME]" file until a proper fix is applied. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2006-1209

Produtos afetados

Php Advanced Transfer Manager

Referências · 10

• 🔥 http://biyosecurity.be/bugs/patm.txt · Exploit
• 🔥 https://exploit-db.com/exploits/2968 · Exploit
• 🔥 http://blogcu.com/Liz0ziM/316652 · Exploit
• http://secunia.com/advisories/17134 · Nota
• http://securityfocus.com/archive/1/437513/100/200/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25127 · Nota
• http://securityreason.com/securityalert/565 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-1209 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1209 · Nota
• http://securityfocus.com/archive/1/427216/100/0/threaded · Nota