CVE-2006-6377
uploadscript uploadscript: no CVSS score yet. EPSS 3.1% chance of exploitation in the next 30 days.
Uploadscript 1.2 and earlier stores sensitive data under the web root with insufficient access control, which allows remote attackers to obtain the admin password hash via a direct request for /password.txt.
- EPSS
- 3.1% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- uploadscript:uploadscript