Myspace Friend Train v2.8

Myspace Friend Train v2.8 Full path disclosure & possible SQL injection. BRBR Its possible to put ' in the input myspace ID box to get the error. Example of the error is below: BRBR bInvalid query: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server versio...