CVE-2006-1209
bugada andrea php advanced transfer manager: no CVSS score yet. EPSS 3.4% chance of exploitation in the next 30 days.
PHP Advanced Transfer Manager 1.00 through 1.30 stores sensitive information, including password hashes, under the web root with insufficient access control, which allows remote attackers to download each password hash via a direct request for a users/[USERNAME] file.
- EPSS
- 3.4% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- bugada_andrea:php_advanced_transfer_manager