Unscored CVE-2006-6347 EUVD-2006-6330GHSA-9g9v-7286-qmgx

Unrestricted file upload vulnerability in TFT-Gallery allows remote authenticated administrators to upload arbitrary .php files, possibly u…

Published Dec 7, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Unrestricted file upload vulnerability in TFT-Gallery allows remote authenticated administrators to upload arbitrary .php files, possibly using admin/index.php. NOTE: this can be leveraged with CVE-2006-1412 to create a remote unauthenticated vector.

References

20061204 Multiple bugs in TFT-Gallery mailing-list
tftgallery-extension-file-upload(30731) vdb-entry
1983 third-party-advisory