CVE-2006-6347: Tft Gallery

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Unrestricted file upload vulnerability in TFT-Gallery allows remote authenticated administrators to upload arbitrary .php files, possibly using admin/index.php. NOTE: this can be leveraged with CVE-2006-1412 to create a remote unauthenticated vector.

Affected products

• Tft Gallery Tft Gallery: any version

Published 2006-12-07. Last modified 2026-06-16.