Exploitation Summary
EIP tracks 1 public exploit for CVE-2006-6819.
AI-analyzed exploit summary The exploit demonstrates multiple vulnerabilities in AlstraSoft Web Host Directory v1.2, including insecure cookie handling for authentication bypass, arbitrary database backup download, and SQL injection for authentication bypass. It provides clear, functional steps to exploit these issues.
Description
AlstraSoft Web Host Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a backup database via a direct request for admin/backup/db.
Exploits (1)
The exploit demonstrates multiple vulnerabilities in AlstraSoft Web Host Directory v1.2, including insecure cookie handling for authentication bypass, arbitrary database backup download, and SQL injection for authentication bypass. It provides clear, functional steps to exploit these issues.