<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 30 Oct 2026 07:38:14 +0000</lastBuildDate>
    <item>
      <title>fkie_cve-2006-1209</title>
      <link>https://db.gcve.eu/vuln/fkie_cve-2006-1209</link>
      <description>&lt;p&gt;PHP Advanced Transfer Manager 1.00 through 1.30 stores sensitive information, including password hashes, under the web root with insufficient access control, which allows remote attackers to download each password hash via a direct request for a users/[USERNAME] file.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;PHP Advanced Transfer Manager 1.00 through 1.30 stores sensitive information, including password hashes, under the web root with insufficient access control, which allows remote attackers to download each password hash via a direct request for a users/[USERNAME] file.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/fkie_cve-2006-1209</guid>
    </item>
    <item>
      <title>GHSA-5vj5-h6pg-jxhp</title>
      <link>https://db.gcve.eu/vuln/ghsa-5vj5-h6pg-jxhp</link>
      <description>&lt;p&gt;PHP Advanced Transfer Manager 1.00 through 1.30 stores sensitive information, including password hashes, under the web root with insufficient access control, which allows remote attackers to download each password hash via a direct request for a users/[USERNAME] file.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;PHP Advanced Transfer Manager 1.00 through 1.30 stores sensitive information, including password hashes, under the web root with insufficient access control, which allows remote attackers to download each password hash via a direct request for a users/[USERNAME] file.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/ghsa-5vj5-h6pg-jxhp</guid>
    </item>
    <item>
      <title>gsd-2006-1209</title>
      <link>https://db.gcve.eu/vuln/gsd-2006-1209</link>
      <description>gsd-2006-1209</description>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/gsd-2006-1209</guid>
    </item>
  </channel>
</rss>
