Bugtraq mailing list archives

Yourfreeworld Styleish Text Ads Script


From: luny () youfucktard com
Date: 19 May 2006 03:24:48 -0000

Homepage of script
http://www.yourfreeworld.com/script/textads.asp


Stylish Text Ads Script can be one of the most useful tools for any webmaster. 
If you own 1 or more websites and want to sell text ads then this tool can be one of the best tool for you. 

Effected files:
tr1.php
advertise.php

Exploit:

SQL Injection on tr1.php can shows full path disclosure errors as well as inproper filtering on the forms of 
advertise.php that can lead to malicious code injection or XSS.

Example:
http://www.example.com/stylishtextads/tr1.php?id=1'


Current thread: