CVE-2006-2617
published 2006-05-26CVE-2006-2617: (1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost Directory 1.2, allows remote attackers to obtain the installation path via an invalid entry in…
PriorityP420medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
1.65%
73.6th percentile
(1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost Directory 1.2, allows remote attackers to obtain the installation path via an invalid entry in the Username field on the login page, which causes the path to be displayed in an SQL error. NOTE: this issue might be resultant from SQL injection.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| alstrasoft | webhost_directory | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-4f6h-p35h-c9p6: AlstraSoft Web Host Directory allows remote attackers to obtain sensitive information by requesting any invalid URI, which reveals the path in an erro
ghsa_unreviewed·2022-05-01·CVSS 5.0
CVE-2006-6817 [MEDIUM] GHSA-4f6h-p35h-c9p6: AlstraSoft Web Host Directory allows remote attackers to obtain sensitive information by requesting any invalid URI, which reveals the path in an erro
AlstraSoft Web Host Directory allows remote attackers to obtain sensitive information by requesting any invalid URI, which reveals the path in an error message, a different vulnerability than CVE-2006-2617.
GHSA
GHSA-vw39-gm5h-8cjq: (1) AlstraSoft Web Host Directory 1
ghsa_unreviewed·2022-05-01
CVE-2006-2617 [MEDIUM] GHSA-vw39-gm5h-8cjq: (1) AlstraSoft Web Host Directory 1
(1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost Directory 1.2, allows remote attackers to obtain the installation path via an invalid entry in the Username field on the login page, which causes the path to be displayed in an SQL error. NOTE: this issue might be resultant from SQL injection.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/20276http://secunia.com/advisories/20278http://securityreason.com/securityalert/955http://www.securityfocus.com/archive/1/434912/100/0/threadedhttp://www.sitepoint.com/forums/showthread.php?t=311969http://www.vupen.com/english/advisories/2006/1972http://www.vupen.com/english/advisories/2006/1973https://exchange.xforce.ibmcloud.com/vulnerabilities/26656https://exchange.xforce.ibmcloud.com/vulnerabilities/26661http://secunia.com/advisories/20276http://secunia.com/advisories/20278http://securityreason.com/securityalert/955http://www.securityfocus.com/archive/1/434912/100/0/threadedhttp://www.sitepoint.com/forums/showthread.php?t=311969http://www.vupen.com/english/advisories/2006/1972http://www.vupen.com/english/advisories/2006/1973https://exchange.xforce.ibmcloud.com/vulnerabilities/26656https://exchange.xforce.ibmcloud.com/vulnerabilities/26661
2006-05-26
Published