CVE-2006-2149

Aardvark Topsites PHP

CVE-2007-1844

CVE-2007-1844 affects Aardvark Topsites PHP 5. it describes multiple PHP remote file inclusion vulnerabilities. The exploit path is through the URL in the path parameter to (1) button/settings_sql.php, (2) settings_sql.php, and (3) sources/misc/new_day.php, enabling remote attackers to potentiall...

CVE-2010-4097

CVE-2010-4097 concerns Aardvark Topsites PHP versions 5.2.0 and 5.2.1, where multiple XSS flaws in index.php allow remote attackers to inject arbitrary scripts via the mail, title, u, and url parameters (the q parameter is covered by CVE-2009-2302). This Open Web vulnerability set confirms the af...

CVE-2009-2304

The CVE-2009-2304 entry describes an information disclosure in Aardvark Topsites PHP 5.2.0 and earlier. Specifically, index.php handling the rate action accepts a nonexistent account name via the u parameter, causing an error message that reveals the installation path. The vulnerability is labele...

CVE-2009-2302

CVE-2009-2302 describes a cross-site scripting (XSS) vulnerability in the PHP index.php of Aardvark Topsites PHP. The issue allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search action for versions 5.2.0 and earlier, with 5.2.1 also reported as affected. T...

CVE-2006-7026

CVE-2006-7026 describes a PHP remote file inclusion in Aardvark Topsites PHP 4.2.2 and earlier. The issue occurs in sources/join.php when register_globals is enabled, allowing an attacker to execute arbitrary PHP code via a URL supplied to the CONFIG[path] parameter (a similar vector to CVE-2006-...

CVE-2009-2303

CVE-2009-2303 affects Aardvark Topsites PHP 5.2.1 and earlier. The vulnerability resides in index.php during a search action, where a negative integer value for the start parameter can trigger an error message that reveals the installation path. This leads to an information disclosure risk (parti...