CVE-2006-6460: Short Url

High severity, CVSS 10.0. EPSS: 2.3% chance of exploitation in the next 30 days.

Yourfreeworld.com Short Url & Url Tracker Script allows remote attackers to obtain sensitive information via an invalid id parameter to login.php, which leaks the path in an error message. NOTE: this issue might be resultant from CVE-2006-2509.

Affected products

• Short Url Short Url: any version
• Url Tracker Script Url Tracker Script: any version

Published 2006-12-11. Last modified 2026-06-16.