CVE-2006-2508

Severity: medium (CVSS 6.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-05-22 · updated 2026-06-16

Description

SQL injection vulnerability in tr1.php in YourFreeWorld.com Stylish Text Ads Script allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly involving an attack vector using advertise.php.

Affected products

Yourfreeworld Stylish Text Ads Script: all versions

References

http://secunia.com/advisories/20213
http://securityreason.com/securityalert/931
http://www.osvdb.org/25691
http://www.osvdb.org/25692
http://www.securityfocus.com/archive/1/434527/100/0/threaded
http://www.securityfocus.com/bid/18044
http://www.vupen.com/english/advisories/2006/1897
https://exchange.xforce.ibmcloud.com/vulnerabilities/26569
https://exchange.xforce.ibmcloud.com/vulnerabilities/26570
http://secunia.com/advisories/20213
http://securityreason.com/securityalert/931
http://www.osvdb.org/25691

Get alerted when CVE-2006-2508 or the next vulnerability affects your stack