system
Describe <CVE-2006-1207>.
user
What is <CVE-2006-1207>?
assistant
PHP Upload Center stores password hashes under the web root with insufficient access control, which allows remote attackers to download each password hash via a direct request for the upload/users/[USERNAME] file..