Vulnerabilities > CVE-2006-6258 - Input Validation vulnerability in AlternC

047910
CVSS 9.3 - CRITICAL
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
alternc
critical
NVD
Published: 2006-12-04
Updated: 2018-10-17

Summary

The phpmyadmin subsystem in AlternC 0.9.5 and earlier transmits the SQL password in cleartext in a cookie, which might allow remote attackers to obtain the password by sniffing or by conducting a cross-site scripting (XSS) attack.

Vulnerable Configurations

Part Description Count
Application
Alternc
1

References