CVE-2006-2617 - (1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost Directory 1.2, allows remote attackers to obtain the installation path via an invalid entry in the Username field on the login page, which causes the path to be displayed in an SQL error

Back Back to CVE browser

MEDIUM

(1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost Directory 1.2, allows remote attackers to obtain the installation path via an invalid entry in the Username field on the login page, which causes the path to be displayed in an SQL error

Published May 26, 2006

5.0

MEDIUM

CVSS 2.0

EPSS 1.65%

Description

(1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost Directory 1.2, allows remote attackers to obtain the installation path via an invalid entry in the Username field on the login page, which causes the path to be displayed in an SQL error. NOTE: this issue might be resultant from SQL injection.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (10)

http://secunia.com/advisories/20276
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/20278
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securityreason.com/securityalert/955
third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/434912/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.sitepoint.com/forums/showthread.php?t=311969
x_refsource_MISC
http://www.vupen.com/english/advisories/2006/1972
vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2006/1973
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-2616
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/26656
vdb-entryx_refsource_XF
https://exchange.xforce.ibmcloud.com/vulnerabilities/26661
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/20276		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/20278		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securityreason.com/securityalert/955		third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/434912/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.sitepoint.com/forums/showthread.php?t=311969		x_refsource_MISC
http://www.vupen.com/english/advisories/2006/1972		vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2006/1973		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-2616		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/26656		vdb-entryx_refsource_XF
https://exchange.xforce.ibmcloud.com/vulnerabilities/26661		vdb-entryx_refsource_XF