← Database

CVE-2006-1412

MEDIUM CVSS: 5.0 Published: 2006-03-28 Modified: 2026-06-16

Description

TFT Gallery 0.10 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the admin password file and obtain password hashes via a direct request to admin/passwd.

Affected Platforms

Tft Gallery Tft Gallery

Weakness Type

NVD-CWE-Other

References