CVE:CVE-2006-6461
CNNVD:CNNVD-200612-222
Yourfreeworld Stylish Text Ads Script中的tr1.php存在安全路径泄露漏洞。远程攻击者可以通过无效id参数(导致系统在出错消息内泄露路径)获取安装路径。
solution:Upgrade yourfreeworld stylish_text_ads_script to a higher version than *