{"id":"CVE-2006-2510","aliases":["EUVD-2006-2510","GHSA-xwgc-99jv-crpq"],"status":"published","title":"Cross-site scripting (XSS) vulnerability in the URL submission form in YourFreeWorld.com Short...","description":"Cross-site scripting (XSS) vulnerability in the URL submission form in YourFreeWorld.com Short Url \u0026 Url Tracker Script allows remote attackers to inject arbitrary web script or HTML via an unspecified form for submitting URLs.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01326,"percentile":0.71174,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2006-05-22T19:00:00Z","modified":"2026-06-16T22:25:12Z","products":[{"vendor":"yourfreeworld","product":"short_url_and_url_tracker_script"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/26574","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/434530/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.securityfocus.com/bid/18046","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2006-2510"},{"url":"https://github.com/advisories/GHSA-xwgc-99jv-crpq"}],"sources":{"cve":[{"id":"CVE-2006-2510","description":"Cross-site scripting (XSS) vulnerability in the URL submission form in YourFreeWorld.com Short Url \u0026 Url Tracker Script allows remote attackers to inject arbitrary web script or HTML via an unspecified form for submitting URLs.","status":"published","published":"2006-05-22T19:00:00Z","modified":"2024-08-07T17:51:04.623Z","updated_at":"2026-11-02T14:33:49.265317Z"}],"euvd":[{"id":"EUVD-2006-2510","description":"Cross-site scripting (XSS) vulnerability in the URL submission form in YourFreeWorld.com Short Url \u0026 Url Tracker Script allows remote attackers to inject arbitrary web script or HTML via an unspecified form for submitting URLs.","status":"published","published":"2006-05-22T19:00:00Z","modified":"2024-08-07T17:51:04Z","updated_at":"2026-11-03T01:16:00.485318Z"}],"ghsa":[{"id":"GHSA-xwgc-99jv-crpq","title":"Cross-site scripting (XSS) vulnerability in the URL submission form in YourFreeWorld.com Short...","description":"Cross-site scripting (XSS) vulnerability in the URL submission form in YourFreeWorld.com Short Url \u0026 Url Tracker Script allows remote attackers to inject arbitrary web script or HTML via an unspecified form for submitting URLs.","status":"published","published":"2022-05-01T06:59:51Z","modified":"2023-01-31T05:01:25Z","updated_at":"2026-11-02T14:48:03.375326Z"}],"nvd":[{"id":"CVE-2006-2510","description":"Cross-site scripting (XSS) vulnerability in the URL submission form in YourFreeWorld.com Short Url \u0026 Url Tracker Script allows remote attackers to inject arbitrary web script or HTML via an unspecified form for submitting URLs.","status":"published","published":"2006-05-22T19:02:00Z","modified":"2026-06-16T22:25:12.043Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:01:02.98271Z"}]}}
