PHP Advanced Transfer Manager 1.30 has a default password for the administrator user, which allows remote attackers to upload and execute arbitrary PHP files.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Php_advanced_transfer_manager | Bugada_andrea | 1.30 (including) | 1.30 (including) |