CVE-2007-0532: Undefined Security Weakness

Tuan Do Uploader aka php-uploader 6 beta 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the administrator password hash via a direct request for userdata/user1.txt...