CVE-2005-2998

Description

PHP Advanced Transfer Manager 1.30 has a default password for the administrator user, which allows remote attackers to upload and execute arbitrary PHP files.

Affected products

• bugada_andrea / php_advanced_transfer_manager1.30 – 1.30

References

• MISChttp://rgod.altervista.org/phpatm130.html