CVE-2006-2508 json
SQL injection vulnerability in tr1.php in YourFreeWorld.com Stylish Text Ads Script allows remote attackers to execute arbitrary SQL comman…
published 2006-05-22 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-2508
- cvss
- 6.4
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 2.6%
- EPSS 2.6% chance of exploitation in 30 days, percentile 85%
- public exploits
- 0
- none known
Summary
SQL injection vulnerability in tr1.php in YourFreeWorld.com Stylish Text Ads Script allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly involving an attack vector using advertise.php.
Exploit prediction
2.64% chance of exploitation in the next 30 days, higher than 85% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- osvdb.org http://www.osvdb.org/25692 referenced PoC, tagged "exploit" by a source, unverified
- osvdb.org http://www.osvdb.org/25691 referenced PoC, tagged "exploit" by a source, unverified
- securityfocus.com http://www.securityfocus.com/bid/18044 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 6.4 | AV:N/AC:L/Au:N/C:N/I:P/A:P |
References
-
osvdb.org
/25692
vdb-entry, exploit
-
osvdb.org
/25691
vdb-entry, exploit
-
securityfocus.com
/bid/18044
vdb-entry, exploit
-
secunia.com
/advisories/20213
third-party-advisory, vendor-advisory
-
vupen.com
/english/advisories/2006/1897
vdb-entry
-
securityfocus.com
/archive/1/434527/100/0/threaded
mailing-list
-
exchange.xforce.ibmcloud.com
/vulnerabilities/26569
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/26570
vdb-entry
-
securityreason.com
/securityalert/931
third-party-advisory
Sources
- CVE List CVE-2006-2508
- NVD CVE-2006-2508
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.