Security phpATM 1.32 Cross Site Request Forgery / Path Disclosure June 17, 2016 007admin Leave a comment phpATM versions 1.32 and below suffers from cross site request forgery and path disclosure vulnerabilities.