CVE-2006-2617

MEDIUM 5.0CVE-2006-2617 · Published 26/05/2006 · updated 16/06/2026

In short

CVE-2006-2617 is a MEDIUM (CVSS 5.0) vulnerability affecting webhost directory (alstrasoft).
Chance of exploitation in the next 30 days (EPSS): 1.7%, higher than 76.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
webhost directory alstrasoft	`= 1.2`	No fix yet

Description

(1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost Directory 1.2, allows remote attackers to obtain the installation path via an invalid entry in the Username field on the login page, which causes the path to be displayed in an SQL error. NOTE: this issue might be resultant from SQL injection.

References

secunia.com/advisories/20276 · Vendor Advisory
secunia.com/advisories/20278 · Vendor Advisory
securityreason.com/securityalert/955
securityfocus.com/archive/1/434912/100/0/threaded
sitepoint.com/forums/showthread.php
vupen.com/english/advisories/2006/1972
vupen.com/english/advisories/2006/1973
exchange.xforce.ibmcloud.com/vulnerabilities/26656
exchange.xforce.ibmcloud.com/vulnerabilities/26661

More vulnerabilities in webhost directory

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free