CVE

Id
12810  
CVE No.
CVE-2005-1604  
Status
Candidate  
Description
PHP Advanced Transfer Manager (phpATM) 1.21 allows remote attackers to upload arbitrary files via filenames containing multiple file extensions, as demonstrated using a filename ending in "php.ns", which allows execution of arbitrary PHP code.  
Phase
Assigned (20050516)  
Votes
None (candidate not yet proposed)  
Comments