CVE-2006-6258: Alternc

High severity, CVSS 9.3. EPSS: 2.6% chance of exploitation in the next 30 days.

The phpmyadmin subsystem in AlternC 0.9.5 and earlier transmits the SQL password in cleartext in a cookie, which might allow remote attackers to obtain the password by sniffing or by conducting a cross-site scripting (XSS) attack.

Affected products

• Alternc Alternc: up to and including 0.9.5

Published 2006-12-04. Last modified 2026-06-16.