CVE-2006-2566 - CVE House
Back to Database
Status published Medium CVE-2006-2566

Alstrasoft Article Manager Pro 1.6 allows remote attackers to obtain...

Vulnerability Description

Alstrasoft Article Manager Pro 1.6 allows remote attackers to obtain sensitive information via (1) a quote character or possibly an invalid value in the action parameter in a request to mrarticles.php or (2) a login QUERY_STRING to admin.php without any additional parameters, which reveal the path in various error messages.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-2566

Credits & Attribution

No credits recorded in the NVD database.

References

More from alstrasoft

View All →
CVE-2008-6932
Unrestricted file upload vulnerability in submit_file.php in AlstraSoft SendIt Pro...
High 7.5
CVE-2008-5751
SQL injection vulnerability in index.php in AlstraSoft Web Email Script...
High 7.5
CVE-2008-5650
SQL injection vulnerability in the login directory in AlstraSoft Web...
High 7.5
CVE-2008-5649
SQL injection vulnerability in admin/admin.php in AlstraSoft Article Manager Pro...
Critical 10
CVE-2008-3954
SQL injection vulnerability in index.php in AlstraSoft Forum Pay Per...
High 7.5

Affected Vendor

Affected Software

article manager pro
Vulnerable Versions:
1.6

Timeline

Official Publish: May 24th, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.