CVE-2007-2659

no score yetEPSS 6.8%

bugada andrea php advanced transfer manager: no CVSS score yet. EPSS 6.8% chance of exploitation in the next 30 days.

Directory traversal vulnerability in index.php in PHP Advanced Transfer Manager (phpATM) 1.30 allows remote attackers to read arbitrary files and obtain script source code via a .. (dot dot) in the directory parameter in a downloadfile action.

EPSS: 6.8% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
Published: 2007-05-14
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

bugada_andrea:php_advanced_transfer_manager

References

http://osvdb.org/41990
http://www.securityfocus.com/bid/23952
http://www.vupen.com/english/advisories/2007/1799
https://exchange.xforce.ibmcloud.com/vulnerabilities/34255
https://www.exploit-db.com/exploits/3918

Check your stack JSON