Circle R Monster Top List vulnerabilities
2 known vulnerabilities affecting circle_r/monster_top_list.
Total CVEs
2
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
HIGH1MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2006-1781P3HIGHCVSS 7.5PoC≤ 1.4.22006-04-13
CVE-2006-1781 [HIGH] CWE-94 CVE-2006-1781: PHP remote file inclusion vulnerability in functions.php in Circle R Monster Top List (MTL) 1.4 allo
PHP remote file inclusion vulnerability in functions.php in Circle R Monster Top List (MTL) 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter. NOTE: It was later reported that 1.4.2 and earlier are affected.
nvd
CVE-2006-2643P4MEDIUMCVSS 4.3v1.42006-05-30
CVE-2006-2643 [MEDIUM] CVE-2006-2643: Cross-site scripting (XSS) vulnerability in index.php in Monster Top List (MTL) 1.4 allows remote at
Cross-site scripting (XSS) vulnerability in index.php in Monster Top List (MTL) 1.4 allows remote attackers to inject arbitrary web script or HTML via the user_error_message parameter.
nvd