← Database

CVE-2006-6347

MEDIUM CVSS: 6.5 Published: 2006-12-07 Modified: 2026-06-16

Description

Unrestricted file upload vulnerability in TFT-Gallery allows remote authenticated administrators to upload arbitrary .php files, possibly using admin/index.php. NOTE: this can be leveraged with CVE-2006-1412 to create a remote unauthenticated vector.

Affected Platforms

Tft Gallery Tft Gallery

Weakness Type

NVD-CWE-Other

References