CVE-2006-2508

Description

SQL injection vulnerability in tr1.php in YourFreeWorld.com Stylish Text Ads Script allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly involving an attack vector using advertise.php.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/26570

https://exchange.xforce.ibmcloud.com/vulnerabilities/26569

http://www.vupen.com/english/advisories/2006/1897

http://www.securityfocus.com/archive/1/434527/100/0/threaded

http://securityreason.com/securityalert/931

http://secunia.com/advisories/20213

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS