Monster Top List Remote File Include

The remote web server is running Monster Top List which is affected by a remote file include vulnerability. SPDX-FileCopyrightText: 2008 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2006-1781

CVE-2006-1781 affects Monster Top List (MTL) “Circle R Monster Top List” version 1.4 and earlier. The vulnerability lies in the PHP file sources/functions.php, where the root_path parameter is not sanitized before being used to include PHP code from other files. This creates a remote file inclusi...