Vulnerabilities

TI-2009-02018 CVE-2009-2111 · GHSA-2x8w-vwh8-qfm3

Static code injection vulnerability in add_reg.php in DB Top Sites 1.0 allows remote…

MEDIUM 49

Static code injection vulnerability in add_reg.php in DB Top Sites 1.0 allows remote attackers to inject arbitrary PHP code via a crafted (1) url and (2) location parameter.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03749 Published 2009-06-18 No fix listed CWE-94

TI-2009-02017 CVE-2009-2110 · GHSA-hgmj-xfjc-p5m9

Multiple directory traversal vulnerabilities in DB Top Sites 1.0, when magic_quotes_gpc…

MEDIUM 44

Multiple directory traversal vulnerabilities in DB Top Sites 1.0, when magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.08447 Published 2009-06-18 No fix listed CWE-22

Vulnerabilities

Filters

Static code injection vulnerability in add_reg.php in DB Top Sites 1.0 allows remote…

Multiple directory traversal vulnerabilities in DB Top Sites 1.0, when magic_quotes_gpc…