VulnerabilityModified
CVE-2006-2508
SQL injection vulnerability in tr1.php in YourFreeWorld.com Stylish Text Ads Script allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly involving an attack vector using advertise.php.
MEDIUM 6.4EPSS 2.58%
Does this matter?
Lower severity and a low EPSS score (2.58%). Track it; it rarely justifies an emergency change on its own.
Description
SQL injection vulnerability in tr1.php in YourFreeWorld.com Stylish Text Ads Script allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly involving an attack vector using advertise.php.
- CVSS 2.0
- 6.4 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:P
- EPSS
- 2.58% probability · 84th percentile
- CISA KEV
- Not listed
- Affected
- yourfreeworld/stylish text ads script
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/20213Vendor Advisory
- http://securityreason.com/securityalert/931
- http://www.osvdb.org/25691Exploit
- http://www.osvdb.org/25692Exploit
- http://www.securityfocus.com/archive/1/434527/100/0/threaded
- http://www.securityfocus.com/bid/18044Exploit
- http://www.vupen.com/english/advisories/2006/1897
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26569
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26570
- http://secunia.com/advisories/20213Vendor Advisory
- http://securityreason.com/securityalert/931
- http://www.osvdb.org/25691Exploit
- http://www.osvdb.org/25692Exploit
- http://www.securityfocus.com/archive/1/434527/100/0/threaded
- http://www.securityfocus.com/bid/18044Exploit
- http://www.vupen.com/english/advisories/2006/1897
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26569
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26570
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.