Vulnerabilities > CVE-2006-6377 - Unspecified vulnerability in Uploadscript

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
uploadscript
exploit available
NVD
Published: 2006-12-07
Updated: 2018-10-17

Summary

Uploadscript 1.2 and earlier stores sensitive data under the web root with insufficient access control, which allows remote attackers to obtain the admin password hash via a direct request for /password.txt.

Vulnerable Configurations

Part Description Count
Application
Uploadscript
1

Exploit-Db

descriptionUploadscript v1.0. Multiple Vulnerabilities. CVE-2006-6377. Webapps exploit for php platform
idEDB-ID:10403
last seen2016-02-01
modified2009-12-13
published2009-12-13
reporterMr.aFiR
sourcehttps://www.exploit-db.com/download/10403/
titleUploadscript 1.0 - Multiple Vulnerabilities

References