CVE-2005-1681: Bugada Andrea PHP Advanced Transfer Manager

High severity, CVSS 7.5. EPSS: 6.6% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in common.php in phpATM 1.21, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code via a URL in the include_location parameter to index.php.

Affected products

• Bugada Andrea PHP Advanced Transfer Manager: version 1.20 only; version 1.21 only

Published 2005-05-20. Last modified 2026-06-16.