Vulnerability Database

290,278

Total vulnerabilities in the database

CVE-2006-2617

(1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost Directory 1.2, allows remote attackers to obtain the installation path via an invalid entry in the Username field on the login page, which causes the path to be displayed in an SQL error. NOTE: this issue might be resultant from SQL injection.

  • Published: May 26, 2006
  • Updated: Apr 13, 2023
  • CVE: CVE-2006-2617
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:P/I:N/A:N

No CWE or OWASP classifications available.

Software From Fixed in
alstrasoft / webhost_directory 1.2 1.2.x