CVE-2006-1412

Published: Mar 28, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

TFT Gallery 0.10 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the admin password file and obtain password hashes via a direct request to admin/passwd.

Affected (1)

Products: Tft Gallery: Tft Gallery

Tft Gallery

1 product

Tft Gallery

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Tft Gallery Tft Gallery	Version 0.10

References (14)

http://secunia.com/advisories/19411

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/archive/1/453471/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/453485/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/17250

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1115

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/25465

Source: cve@mitre.org

https://www.exploit-db.com/exploits/1611

Source: cve@mitre.org

http://secunia.com/advisories/19411