CVE-2006-2618: Cross-site scripting (XSS) vulnerability in (1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHos...

Security readout for executives and security teams

This is an old stored XSS issue in AlstraSoft Web Host Directory 1.2, also named HyperStop WebHost Directory 1.2. Public review submissions could place script or HTML into the site, and auto-approval increases risk because administrator action was not required. Exposure is likely limited to public-facing deployments of AlstraSoft Web Host Directory 1.2 or HyperStop WebHost Directory 1.2 that still accept reviews, especially where review auto-approval remains enabled. Treat this as a legacy exposure cleanup item unless the product is internet-facing and still accepts reviews. Public, auto-approved review submission would raise urgency because malicious content could affect visitors and damage trust. Mitigation focus: Identify whether either named product and version is deployed.; Check vendor or trusted advisory guidance for fixed versions or patches.; Disable review auto-approval until review handling is confirmed safe..

Prepared

Jun 29, 2026, 12:30 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.