Yourfreeworld Styleish Text Ads Script
Homepage of script
http://www.yourfreeworld.com/script/textads.asp
Stylish Text Ads Script can be one of the most useful tools for any webmaster.
If you own 1 or more websites and want to sell text ads then this tool can be
one of the best tool for you.
Effected files:
tr1.php
advertise.php
Exploit:
SQL Injection on tr1.php can shows full path disclosure errors as well as
inproper filtering on the forms of advertise.php that can lead to malicious
code injection or XSS.
Example:
http://www.example.com/stylishtextads/tr1.php?id=1'