PHP Advanced Transfer Manager (phpATM) 1.21 allows remote attackers to upload arbitrary files via filenames containing multiple file extensions, as demonstrated using a filename ending in "php.ns", which allows execution of arbitrary PHP code.
| Software | From | Fixed in |
|---|---|---|
| bugada_andrea / php_advanced_transfer_manager | 1.21 | 1.21.x |