Homepage of script

http://www.yourfreeworld.com/script/textads.asp



Stylish Text Ads Script can be one of the most useful tools for any webmaster. 

If you own 1 or more websites and want to sell text ads then this tool can be 
one of the best tool for you. 


Effected files:

tr1.php

advertise.php


Exploit:


SQL Injection on tr1.php can shows full path disclosure errors as well as 
inproper filtering on the forms of advertise.php that can lead to malicious 
code injection or XSS.


Example:

http://www.example.com/stylishtextads/tr1.php?id=1'

Reply via email to