CVE-2006-2616

Published: May 26, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in the search script in (1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost Directory 1.2, allows remote attackers to execute arbitrary SQL commands via the uri parameter.

Affected (1)

Products: Alstrasoft: Webhost Directory

Alstrasoft

1 product

Webhost Directory

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Alstrasoft Webhost Directory	Version 1.2

References (16)

http://secunia.com/advisories/20276

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/20278

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/955

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/434912/100/0/threaded

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1972

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1973

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26653

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26658

Source: cve@mitre.org

http://secunia.com/advisories/20276