PT-2006-2225 · Php · Php Advanced Transfer Manager

Liz0 · Published 2006-03-14 · Updated 2024-02-14 · CVE-2006-1209

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions PHP Advanced Transfer Manager versions 1.00 through 1.30

Description The issue allows remote attackers to download sensitive information, including password hashes, due to insufficient access control. This is possible because the sensitive data is stored under the web root, making it accessible via a direct request for a "users/[USERNAME]" file.

Recommendations For PHP Advanced Transfer Manager versions 1.00 through 1.30, consider restricting access to the sensitive files stored under the web root to minimize the risk of exploitation. As a temporary workaround, limit direct requests to the "users/[USERNAME]" file until a proper fix is applied. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2006-1209

Affected Products

Php Advanced Transfer Manager

References · 10

• 🔥 http://biyosecurity.be/bugs/patm.txt · Exploit
• 🔥 https://exploit-db.com/exploits/2968 · Exploit
• 🔥 http://blogcu.com/Liz0ziM/316652 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-1209 · Security Note
• http://secunia.com/advisories/17134 · Note
• http://securityfocus.com/archive/1/437513/100/200/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25127 · Note
• http://securityreason.com/securityalert/565 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1209 · Note
• http://securityfocus.com/archive/1/427216/100/0/threaded · Note