CVE-2006-1781

Circle R MTL <1.4.2 - RCE

Title source: llm

Description

PHP remote file inclusion vulnerability in functions.php in Circle R Monster Top List (MTL) 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter. NOTE: It was later reported that 1.4.2 and earlier are affected.

Exploits (2)

exploitdb WORKING POC VERIFIED
by fluffy_bunny · perlwebappsphp
https://www.exploit-db.com/exploits/3530
exploitdb WRITEUP VERIFIED
by r0t · textwebappsphp
https://www.exploit-db.com/exploits/27660

Scores

EPSS 0.1185
EPSS Percentile 93.8%

Details

CWE
CWE-94
Status published
Products (1)
circle_r/monster_top_list < 1.4.2
Published Apr 13, 2006
Tracked Since Feb 18, 2026