Monster Top List Remote File Include

The remote web server contains a PHP application that is affected by a remote file include vulnerability. Description : The remote host is running Monster Top List, a site rating script written in PHP. The installed version of Monster Top List fails to sanitize user input to the 'rootpath'...

Monster Top List Remote File Include

The remote web server is running Monster Top List which is affected by a remote file include vulnerability. SPDX-FileCopyrightText: 2008 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Monster Top List <= 1.4.2 (functions.php root_path) RFI Exploit

Exploit for unknown platform in category web applications =============================================================== Monster Top List = 1.4.2 functions.php rootpath RFI Exploit =============================================================== !/usr/bin/perl Monster Top List = 1.4.2 remote...

Monster Top List 1.4.2 - functions.php?root_path Remote File Inclusion

Monster Top List 1.4.2 - functions.php?rootpath Remote File Inclusion !/usr/bin/perl Monster Top List hTTp://RSTZONE.NET .\n"; print ". coded by fluffybunny - [email protected] .\n"; print "...............................................................\n\n"; my...

Monster Top List 1.4.2 - 'functions.php?root_path' Remote File Inclusion

!/usr/bin/perl Monster Top List hTTp://RSTZONE.NET .\n"; print ". coded by fluffybunny - [email protected] .\n"; print "...............................................................\n\n"; my $kw3,$path,$shell,$conexiune,$cmd,$data ; if !$ARGV0 || !$ARGV1 exit0; $path = $ARGV0; chomp$path; $shell ...

CVE-2006-2643

Cross-site scripting XSS vulnerability in index.php in Monster Top List MTL 1.4 allows remote attackers to inject arbitrary web script or HTML via the usererrormessage parameter...

CVE-2006-2643

Cross-site scripting XSS vulnerability in index.php in Monster Top List MTL 1.4 allows remote attackers to inject arbitrary web script or HTML via the usererrormessage parameter...

XSS in Monster Top List | MTL 1.4

XSS in Monster Top List | MTL 1.4 --------------------------------- Software : Monster Top List --------------------------------- version : Monster Top List 1.4 --------------------------------- Exploit : www.site.com/index.phpusererrormessage=XSS-CODE --------------------------------- Discovery ...

Monster Top List sources/functions.php root_path Parameter Remote File Inclusion

The remote host is running Monster Top List, a site rating script written in PHP. The installed version of Monster Top List fails to sanitize user input to the 'rootpath' parameter in sources/functions.php before using it to include PHP code from other files. An unauthenticated attacker may be ab...

Monster Top List 1.4 - 'functions.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/17546/info Monster Top List is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing...

Remote file inclusion

PHP remote file inclusion vulnerability in functions.php in Circle R Monster Top List MTL 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter. NOTE: It was later reported that 1.4.2 and earlier are affected...

CVE-2006-1781

PHP remote file inclusion vulnerability in functions.php in Circle R Monster Top List MTL 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter. NOTE: It was later reported that 1.4.2 and earlier are affected...

CVE-2006-1781

CVE-2006-1781 affects Monster Top List (MTL) “Circle R Monster Top List” version 1.4 and earlier. The vulnerability lies in the PHP file sources/functions.php, where the root_path parameter is not sanitized before being used to include PHP code from other files. This creates a remote file inclusi...

XSS in Monster Top List 1.4

Advisory: XSS in Monster Top List 1.4 Home Page: http://www.monstertoplist.com/ Уязвимость/Vulnerability: Межсайтовый скриптинг/Cross Site Scripting Уязвимый скрипт/Vulnerable script: index.php Exploit: http://www.monstertoplist.com/mtl14/index.php?usererrormessage=scriptalert/script...