CVE-2006-1781

CVE-2006-1781 affects Monster Top List (MTL) “Circle R Monster Top List” version 1.4 and earlier. The vulnerability lies in the PHP file sources/functions.php, where the root_path parameter is not sanitized before being used to include PHP code from other files. This creates a remote file inclusi...

CVE-2006-2643

CVE-2006-2643 is an XSS vulnerability in Monster Top List (MTL) 1.4, exposed via the user_error_message parameter in index.php. The available documents confirm the affected software (MTL 1.4) and the vulnerable entry point (index.php), but do not provide additional technical details such as concr...