CVE-2007-0532 Tuan Do Uploader (aka php-uploader) 6 beta 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the administrator password hash v...
MediumCVSS 5.0
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Tuan Do Uploader (aka php-uploader) 6 beta 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the administrator password hash via a direct request for userdata/user_1.txt.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tuan do uploader | = 6_beta_1 | No fix listed |
References
- 2187 third-party-advisory
- 20070122 Uploader <= (userdata/user_1.txt) Password Disclosure Vulnerability mailing-list
- uploader-userdata-info-disclosure(31683) vdb-entry