CVE-2006-4594
Last modified
CVE-2006-4594 is a vulnerability of currently unknown severity. Multiple PHP remote file inclusion vulnerabilities in PHP Advanced Transfer Manager (phpAtm) 1.21 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the include_location parameter in (1) confirm.php or (2) login.php. NOTE: the include_location parameter to index.php is already covered by CVE-2005-1681.. EPSS estimates a 2.43% chance of exploitation in the next 30 days.
Description
Multiple PHP remote file inclusion vulnerabilities in PHP Advanced Transfer Manager (phpAtm) 1.21 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the include_location parameter in (1) confirm.php or (2) login.php. NOTE: the include_location parameter to index.php is already covered by CVE-2005-1681.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Bugada Andrea | Php Advanced Transfer Manager | <= 1.21 |
| Bugada Andrea | Php Advanced Transfer Manager | 1.20 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-4594?
How severe is CVE-2006-4594?
How do I fix CVE-2006-4594?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2006
- CVE-2006-4588vtiger CRM 4.2.4, and possibly earlier, allows remote attack…
- CVE-2006-4589PHP remote file inclusion vulnerability in 0_admin/modules/W…
- CVE-2006-4590SQL injection vulnerability in admin/default.asp in Jetstat.…
- CVE-2006-4591Multiple PHP remote file inclusion vulnerabilities in Alstra…
- CVE-2006-4592Incomplete blacklist vulnerability in default.asp in 8pixel.…
- CVE-2006-4593Cross-site scripting (XSS) vulnerability in index.php in Sof…
- CVE-2006-4595muforum (µforum) 0.4c stores membres/members.dat under the w…
- CVE-2006-4596PHP remote file inclusion in MyBace Light Skrip, when regist…
- CVE-2006-4597SQL injection vulnerability in devam.asp in ICBlogger 2.0 an…
- CVE-2006-4598Multiple SQL injection vulnerabilities in links.php in ssLin…
- CVE-2006-4599SQL injection vulnerability in aut_verifica.inc.php in Auten…
- CVE-2006-4600slapd in OpenLDAP before 2.3.25 allows remote authenticated …
Are you affected by CVE-2006-4594?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST