CVEvulnerability

CVE-2006-1207

5.0 MEDIUM Published 2006-03-14 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2006-03-14
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

PHP Upload Center stores password hashes under the web root with insufficient access control, which allows remote attackers to download each password hash via a direct request for the upload/users/[USERNAME] file.

Affected configurations

• sergey korostel php upload center

References

http://biyosecurity.be/bugs/phpuploadcenter2.txt Exploit
http://www.blogcu.com/Liz0ziM/317250/ URL Repurposed
http://www.osvdb.org/23627 www.osvdb.org
http://www.scripts-by.net/PHP/File-Manipulation/php-upload-center.html URL Repurposed
http://www.securityfocus.com/archive/1/427215/100/0/threaded www.securityfocus.com
http://biyosecurity.be/bugs/phpuploadcenter2.txt Exploit
http://www.blogcu.com/Liz0ziM/317250/ URL Repurposed
http://www.osvdb.org/23627 www.osvdb.org
http://www.scripts-by.net/PHP/File-Manipulation/php-upload-center.html URL Repurposed
http://www.securityfocus.com/archive/1/427215/100/0/threaded www.securityfocus.com