Vulnerability Details : CVE-2006-2617
(1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost Directory 1.2, allows remote attackers to obtain the installation path via an invalid entry in the Username field on the login page, which causes the path to be displayed in an SQL error. NOTE: this issue might be resultant from SQL injection.
Vulnerability category: Sql Injection
Exploit prediction scoring system (EPSS) score for CVE-2006-2617
Probability of exploitation activity in the next 30 days: 0.92%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 81 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2006-2617
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:P/I:N/A:N |
10.0
|
2.9
|
NIST |
References for CVE-2006-2617
- http://www.securityfocus.com/archive/1/434912/100/0/threaded
- http://www.sitepoint.com/forums/showthread.php?t=311969
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/26661
- http://www.vupen.com/english/advisories/2006/1973
- http://securityreason.com/securityalert/955
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/26656
- http://www.vupen.com/english/advisories/2006/1972
Products affected by CVE-2006-2617
- cpe:2.3:a:alstrasoft:webhost_directory:1.2:*:*:*:*:*:*:*