CVE-2006-6460

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-12-11 · updated 2026-06-16

Description

Yourfreeworld.com Short Url & Url Tracker Script allows remote attackers to obtain sensitive information via an invalid id parameter to login.php, which leaks the path in an error message. NOTE: this issue might be resultant from CVE-2006-2509.

Affected products

Short Url: all versions
Url Tracker Script: all versions

References

http://archives.neohapsis.com/archives/bugtraq/2006-05/0384.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/26573
http://archives.neohapsis.com/archives/bugtraq/2006-05/0384.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/26573

Get alerted when CVE-2006-6460 or the next vulnerability affects your stack