CVE-2006-2543

CVE-2006-2543 affects Xtreme Topsites 1.1. The vulnerability is in join.php and allows remote attackers to trigger MySQL errors and, possibly, conduct SQL injection via unspecified vectors. The NVD entry rates the impact at a base score of 5.1 (Medium) with a network attack vector, no authenticat...

CVE-2006-2544

CVE-2006-2544 affects Xtreme Topsites 1.1 with magic_quotes_gpc disabled, allowing remote attackers to trigger SQL injection through two parameters: searchthis in lostid.php and id in stats.php. The vulnerability enables arbitrary SQL execution and has a NVD base score of 5.1 (Medium) with networ...

CVE-2006-2545

CVE-2006-2545 affects Xtreme Topsites 1.1. The vulnerability is described as multiple cross-site scripting (XSS) flaws accessible via the id parameter in stats.php and via unspecified inputs in lostid.php (likely the searchthis parameter), with one or more vectors possibly stemming from SQL injec...