Unrated severityNVD Advisory· Published Mar 28, 2006· Updated Jun 16, 2026
CVE-2006-1412
CVE-2006-1412
Description
TFT Gallery 0.10 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the admin password file and obtain password hashes via a direct request to admin/passwd.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:tft_gallery:tft_gallery:0.10:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:tft_gallery:tft_gallery:0.10:*:*:*:*:*:*:*
- (no CPE)range: =0.10
Patches
Vulnerability mechanics
References
7- secunia.com/advisories/19411nvdVendor Advisory
- www.securityfocus.com/archive/1/453471/100/0/threadednvd
- www.securityfocus.com/archive/1/453485/100/0/threadednvd
- www.securityfocus.com/bid/17250nvd
- www.vupen.com/english/advisories/2006/1115nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/25465nvd
- www.exploit-db.com/exploits/1611nvd
News mentions
0No linked articles in our index yet.