4 matches found
CVE-2006-2544: Undefined Security Weakness
Multiple SQL injection vulnerabilities in Xtreme Topsites 1.1, with magicquotesgpc disabled, allow remote attackers to execute arbitrary SQL commands via the 1 searchthis parameter in lostid.php and 2 id parameter in stats.php. NOTE: the provenance of this information is unknown; portions of the...
CVE-2006-2545: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Xtreme Topsites 1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter in stats.php and 2 unspecified inputs in lostid.php, probably the searchthis parameter. NOTE: one or more of these vectors might be resulta...
topsitesXSS.txt
Xtremescripts Topsites v1.1 Homepage: http://www.xtremescripts.com/topsites.php Description: Xtreme Topsites is a popular topsite PHP script for websites. Most commonly used across anime websites at the moment. The topsite will count hits/clicks in and hits out and will rank them on total hits so...
Xtremescripts Topsites v1.1
Xtremescripts Topsites v1.1 Homepage: http://www.xtremescripts.com/topsites.php Description: Xtreme Topsites is a popular topsite PHP script for websites. Most commonly used across anime websites at the moment. The topsite will count hits/clicks in and hits out and will rank them on total hits so...