CVE:CVE-2006-6377
CNNVD:CNNVD-200612-124
Uploadscript 1.2及更早版本在web根下面存储敏感数据，并且未采取足够的访问控制，远程攻击者可通过直接请求/password.txt来获取管理员秘密哈希。
solution:Upgrade uploadscript uploadscript to a higher version than 1.2,and avoid the version (,1.2]