Phpatm · Phpatm · CVE-2006-4594
**Name of the Vulnerable Software and Affected Versions**
phpAtm versions 1.21 and earlier
**Description**
The issue allows remote attackers to execute arbitrary PHP code via a URL in the `include location` parameter in files such as confirm.php or login.php.
**Recommendations**
For phpAtm versions 1.21 and earlier, avoid using the `include location` parameter in affected API endpoints until the issue is resolved.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.