CVE-2006-6819

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-12-29 · updated 2026-06-16

Description

AlstraSoft Web Host Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a backup database via a direct request for admin/backup/db.

Affected products

Alstrasoft Webhost Directory: all versions

References

http://secunia.com/advisories/23500
http://www.securityfocus.com/archive/1/455352/100/0/threaded
http://secunia.com/advisories/23500
http://www.securityfocus.com/archive/1/455352/100/0/threaded

Get alerted when CVE-2006-6819 or the next vulnerability affects your stack