Yourfreeworld Styleish Text Ads Script

[luny@xxxxxxxxxxxxxxx]

Homepage of script
http://www.yourfreeworld.com/script/textads.asp


Stylish Text Ads Script can be one of the most useful tools for any webmaster. 
If you own 1 or more websites and want to sell text ads then this tool can be 
one of the best tool for you. 

Effected files:
tr1.php
advertise.php

Exploit:

SQL Injection on tr1.php can shows full path disclosure errors as well as 
inproper filtering on the forms of advertise.php that can lead to malicious 
code injection or XSS.

Example:
http://www.example.com/stylishtextads/tr1.php?id=1'