Unrated severityNVD Advisory· Published May 26, 2006· Updated Apr 16, 2026

CVE-2006-2618

Description

Cross-site scripting (XSS) vulnerability in (1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost Directory 1.2, might allow remote attackers to inject arbitrary web script or HTML via the "write a review" box. NOTE: since user reviews do not require administrator privileges, and an auto-approve mechanism exists, this issue is a vulnerability.

Affected products

Alstrasoft/Webhost Directory
cpe:2.3:a:alstrasoft:webhost_directory:1.2:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

securityreason.com/securityalert/955nvd
www.securityfocus.com/archive/1/434912/100/0/threadednvd
www.sitepoint.com/forums/showthread.phpnvd
exchange.xforce.ibmcloud.com/vulnerabilities/26665nvd
exchange.xforce.ibmcloud.com/vulnerabilities/26666nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000