CVE-2006-1781 - PHP remote file inclusion vulnerability in functions.php in Circle R Monster Top List (MTL) 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter

Back Back to CVE browser

HIGH

PHP remote file inclusion vulnerability in functions.php in Circle R Monster Top List (MTL) 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter

Published Apr 13, 2006

7.5

HIGH

CVSS 2.0

EPSS 9.82%

Description

PHP remote file inclusion vulnerability in functions.php in Circle R Monster Top List (MTL) 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter. NOTE: It was later reported that 1.4.2 and earlier are affected.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-94

Code Injection

References (8)

http://pridels0.blogspot.com/2006/04/monstertoplist.html
x_refsource_MISC
http://secunia.com/advisories/19688
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.osvdb.org/24650
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/17546
vdb-entryx_refsource_BID
http://www.securityfocus.com/bid/23074
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/1350
vdb-entryx_refsource_VUPENVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25774
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/3530
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://pridels0.blogspot.com/2006/04/monstertoplist.html		x_refsource_MISC
http://secunia.com/advisories/19688		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.osvdb.org/24650		vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/17546		vdb-entryx_refsource_BID
http://www.securityfocus.com/bid/23074		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/1350		vdb-entryx_refsource_VUPENVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25774		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/3530		exploitx_refsource_EXPLOIT-DB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 13, 2006

Updated Aug 7, 2024

Reserved Apr 13, 2006

Link CVE-2006-1781

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-1781

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-1781