Webhost Directory@* Security Vulnerabilities and Issues — Webhost Directory@* CVE List

Lucene search

AlstrasoftWebhost Directory*

3 matches found

CVE•added 2006/12/29 11:28 a.m.•40 views

CVE-2006-6819

AlstraSoft Web Host Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a backup database via a direct request for admin/backup/db.

6.4CVSS6.7AI score0.01083EPSS

CVE•added 2006/12/29 11:28 a.m.•38 views

CVE-2006-6818

AlstraSoft Web Host Directory allows remote attackers to bypass authentication and change the admin password via a direct request to admin/config.

7.5CVSS7.5AI score0.00414EPSS

CVE•added 2006/12/29 11:28 a.m.•34 views

CVE-2006-6817

AlstraSoft Web Host Directory allows remote attackers to obtain sensitive information by requesting any invalid URI, which reveals the path in an error message, a different vulnerability than CVE-2006-2617.

5CVSS6.1AI score0.00812EPSS