Vulnerabilities

TI-2006-02476 CVE-2006-2545 · GHSA-47rj-gfhj-2qrm

Multiple cross-site scripting (XSS) vulnerabilities in Xtreme Topsites 1.1 allow remote…

LOW 16

Multiple cross-site scripting (XSS) vulnerabilities in Xtreme Topsites 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter in stats.php and (2) unspecified inputs in lostid.php, pro…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.01163 Published 2006-05-23 No fix listed CWE-79

TI-2006-02475 CVE-2006-2544 · GHSA-x3qx-39vp-3vph

Multiple SQL injection vulnerabilities in Xtreme Topsites 1.1, with magic_quotes_gpc…

LOW 25

Multiple SQL injection vulnerabilities in Xtreme Topsites 1.1, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the (1) searchthis parameter in lostid.php and (2) id parameter…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.0108 Published 2006-05-23 No fix listed

TI-2006-02474 CVE-2006-2543 · GHSA-8mcx-cfxm-5pmr

Xtreme Topsites 1.1 allows remote attackers to trigger MySQL errors and possibly conduct…

LOW 26

Xtreme Topsites 1.1 allows remote attackers to trigger MySQL errors and possibly conduct SQL injection attacks via unspecified vectors in join.php.

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.01202 Published 2006-05-23 No fix listed

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in Xtreme Topsites 1.1 allow remote…

Multiple SQL injection vulnerabilities in Xtreme Topsites 1.1, with magic_quotes_gpc…

Xtreme Topsites 1.1 allows remote attackers to trigger MySQL errors and possibly conduct…