CVE-2005-2998: Bugada Andrea PHP Advanced Transfer Manager

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

PHP Advanced Transfer Manager 1.30 has a default password for the administrator user, which allows remote attackers to upload and execute arbitrary PHP files.

Affected products

• Bugada Andrea PHP Advanced Transfer Manager: version 1.30 only

Published 2005-09-20. Last modified 2026-06-16.