CVE-2006-1781

PHP remote file inclusion vulnerability in functions.php in Circle R Monster Top List MTL 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter. NOTE: It was later reported that 1.4.2 and earlier are affected...

XSS in Monster Top List 1.4

Advisory: XSS in Monster Top List 1.4 Home Page: http://www.monstertoplist.com/ Уязвимость/Vulnerability: Межсайтовый скриптинг/Cross Site Scripting Уязвимый скрипт/Vulnerable script: index.php Exploit: http://www.monstertoplist.com/mtl14/index.php?usererrormessage=scriptalert/script...