Vulnerabilities > CVE-2006-6819 - Information Disclosure vulnerability in Webhost Directory

047910
CVSS 6.4 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
alstrasoft
exploit available
NVD
Published: 2006-12-29
Updated: 2018-10-17

Summary

AlstraSoft Web Host Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a backup database via a direct request for admin/backup/db.

Vulnerable Configurations

Part Description Count
Application
Alstrasoft
1

Exploit-Db

descriptionAlstraSoft Web Host Directory 1.2 Multiple Vulnerabilities. CVE-2006-6819,CVE-2008-5650. Webapps exploit for php platform
idEDB-ID:7116
last seen2016-02-01
modified2008-11-14
published2008-11-14
reporterG4N0K
sourcehttps://www.exploit-db.com/download/7116/
titleAlstraSoft Web Host Directory 1.2 - Multiple Vulnerabilities

References