tr1.php in Yourfreeworld Stylish Text Ads Script allows remote attackers to obtain the installation path via an invalid id parameter, which leaks the path in an error message. NOTE: this issue might be resultant from CVE-2006-2508.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Stylish_text_ads_script | Yourfreeworld | * | * |