CVE-2006-6818 AlstraSoft Web Host Directory allows remote attackers to bypass authentication and change the admin password via a direct request to admin/config.

HighCVSS 7.5 EPSS 1.7%

Published: 2006-12-29 13:00
Updated: 2026-06-17 01:33
Exploit status: No public exploit known

Sign in for asset impact Search another CVE

Description

AlstraSoft Web Host Directory allows remote attackers to bypass authentication and change the admin password via a direct request to admin/config.

Affected products

Product	Affected versions	Fixed in
alstrasoft webhost directory	All versions	No fix listed

References

20061227 Host directory full disclosure and input error mailing-list
21787 vdb-entry
host-directory-admin-security-bypass(31123) vdb-entry

CVSS v2.0

7.5 High

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: Partial

Weakness & likelihood

EPSS (exploitation probability, 30 days): 1.65% (percentile 76.9)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.