CVE-2006-6819

AlstraSoft Web Host Directory - Info Disclosure

Title source: llm

Description

AlstraSoft Web Host Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a backup database via a direct request for admin/backup/db.

Exploits (1)

exploitdb WORKING POC

webappsphp

https://www.exploit-db.com/exploits/7116

View Code ZIP pw:eip

References (2)

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/455352/100/0/threaded

[Third Party Advisory] http://secunia.com/advisories/23500

Scores

EPSS 0.0132

EPSS Percentile 79.9%

Details

Status published

Products (1)

alstrasoft/webhost_directory

Published Dec 29, 2006

Tracked Since Feb 18, 2026