Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Monster Top List MTL 1.4 allows remote attackers to inject arbitrary web script or HTML via the usererrormessage parameter...

CVE-2006-2643

CVE-2006-2643 is an XSS vulnerability in Monster Top List (MTL) 1.4, exposed via the user_error_message parameter in index.php. The available documents confirm the affected software (MTL 1.4) and the vulnerable entry point (index.php), but do not provide additional technical details such as concr...

CVE-2006-1781

CVE-2006-1781 affects Monster Top List (MTL) “Circle R Monster Top List” version 1.4 and earlier. The vulnerability lies in the PHP file sources/functions.php, where the root_path parameter is not sanitized before being used to include PHP code from other files. This creates a remote file inclusi...