Overview
- Description
- Yourfreeworld.com Short Url & Url Tracker Script allows remote attackers to obtain sensitive information via an invalid id parameter to login.php, which leaks the path in an error message. NOTE: this issue might be resultant from CVE-2006-2509.
- Source
- cve@mitre.org
- NVD status
- Modified
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 10
- Impact score
- 10
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:short_url:short_url:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B305CAEA-4942-451B-B142-8540722FB350"
},
{
"criteria": "cpe:2.3:a:url_tracker_script:url_tracker_script:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E132CDF1-68C8-4ACF-80B4-A7583F3E728F"
}
],
"operator": "OR"
}
]
}
]