CVEvulnerability
CVE-2006-2618
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-05-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in (1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost Directory 1.2, might allow remote attackers to inject arbitrary web script or HTML via the "write a review" box. NOTE: since user reviews do not require administrator privileges, and an auto-approve mechanism exists, this issue is a vulnerability.
Affected configurations
• alstrasoft webhost directory 1.2
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://securityreason.com/securityalert/955 securityreason.com
- http://www.securityfocus.com/archive/1/434912/100/0/threaded www.securityfocus.com
- http://www.sitepoint.com/forums/showthread.php?t=311969 www.sitepoint.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26665 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26666 exchange.xforce.ibmcloud.com
- http://securityreason.com/securityalert/955 securityreason.com
- http://www.securityfocus.com/archive/1/434912/100/0/threaded www.securityfocus.com
- http://www.sitepoint.com/forums/showthread.php?t=311969 www.sitepoint.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26665 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26666 exchange.xforce.ibmcloud.com