How severe is CVE-2006-2617?

CVE-2006-2617 has a CVSS 2.0 base score of 5.0, rated medium severity.

Is CVE-2006-2617 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (74th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2006-2617?

CVE-2006-2617 affects Alstrasoft Webhost Directory. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2006-2617?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2006-2617 published?

CVE-2006-2617 was published on 2006-05-26 and last updated on 2026-06-16.

CVE-2006-2617

CVE-2006-2617 is a medium-severity vulnerability in Alstrasoft Webhost Directory with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Medium (CVSS 2.0 base score 5.0)
EPSS exploit prediction: 2% (74th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Alstrasoft Webhost Directory
Published: 2006-05-26
Last modified: 2026-06-16

Description

(1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost Directory 1.2, allows remote attackers to obtain the installation path via an invalid entry in the Username field on the login page, which causes the path to be displayed in an SQL error. NOTE: this issue might be resultant from SQL injection.

Frequently asked questions

What is CVE-2006-2617?: (1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost Directory 1.2, allows remote attackers to obtain the installation path via an invalid entry in the Username field on the login page, which causes the path to be displayed in an SQL error. NOTE: this issue might be resultant from SQL injection.
How severe is CVE-2006-2617?: CVE-2006-2617 has a CVSS 2.0 base score of 5.0, rated medium severity.
Is CVE-2006-2617 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (74th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2006-2617?: CVE-2006-2617 affects Alstrasoft Webhost Directory. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2006-2617?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2006-2617 published?: CVE-2006-2617 was published on 2006-05-26 and last updated on 2026-06-16.

References

Affected products (1)

cpe:2.3:a:alstrasoft:webhost_directory:1.2:*:*:*:*:*:*:*

More vulnerabilities in Alstrasoft Webhost Directory

CVE-2008-5650 — High (CVSS 7.5): SQL injection vulnerability in the login directory in AlstraSoft Web Host Directory allows remote attackers to execute…
CVE-2006-6818 — High (CVSS 7.5): AlstraSoft Web Host Directory allows remote attackers to bypass authentication and change the admin password via a…
CVE-2006-2616 — High (CVSS 7.5): SQL injection vulnerability in the search script in (1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost…
CVE-2006-6819 — Medium (CVSS 6.4): AlstraSoft Web Host Directory stores sensitive information under the web root with insufficient access control, which…
CVE-2006-6817 — Medium (CVSS 5.0): AlstraSoft Web Host Directory allows remote attackers to obtain sensitive information by requesting any invalid URI,…
CVE-2006-2618 — Medium (CVSS 4.3): Cross-site scripting (XSS) vulnerability in (1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost Directory…

All CVEs affecting Alstrasoft Webhost Directory →