phpATM versions 1.32 and below suffers from cross site request forgery and path disclosure vulnerabilities.
df0c2e8cdde4cef425a90d37b3280ca2ab7ba7b73bf71860018c5dd1ad11740f
phpATM version 1.32 suffers from a remote shell upload vulnerability.
bd06692dea631ae0422f2ca3b556ff56ffbb8f5f6d8db4dccba08d74b62429d9