CVE:CVE-2006-6460
CNNVD:CNNVD-200612-230
Yourfreeworld.com Short Url & Url Tracker Script存在敏感信息泄露漏洞。远程攻击者可以通过传给login.php的无效id参数(导致系统在出错信息中泄漏路径)来获取敏感信息。
solution:Upgrade short_url short_url to a higher version than *; Upgrade url_tracker_script url_tracker_script to a higher version than *