medium6.4Public exploit code
CVE-2006-6819
AlstraSoft Web Host Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a bac…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Alstrasoft Web Host Directory 1.2 - Multiple Vulnerabilities2008-11-14 · webapps · php · Verified
Impact
AlstraSoft Web Host Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a backup database via a direct request for admin/backup/db.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Alstrasoft | Webhost Directory | All versions |