Description
SQL injection vulnerability in tr1.php in YourFreeWorld.com Stylish Text Ads Script allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly involving an attack vector using advertise.php.
References
- 25692 vdb-entry
- ADV-2006-1897 vdb-entry
- 25691 vdb-entry
- 20060519 Yourfreeworld Styleish Text Ads Script mailing-list
- yourfreeworld-tr1-advertise-sql-injection(26569) vdb-entry
- yourfreeworld-tr1-advertise-xss(26570) vdb-entry
- 20213 third-party-advisory
- 931 third-party-advisory
- 18044 vdb-entry