CVE-2006-1781
Circle R MTL <1.4.2 - RCE
Title source: llmDescription
PHP remote file inclusion vulnerability in functions.php in Circle R Monster Top List (MTL) 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter. NOTE: It was later reported that 1.4.2 and earlier are affected.
Exploits (2)
exploitdb
WORKING POC
VERIFIED
by fluffy_bunny · perlwebappsphp
https://www.exploit-db.com/exploits/3530
References (8)
Scores
EPSS
0.1185
EPSS Percentile
93.8%
Details
CWE
CWE-94
Status
published
Products (1)
circle_r/monster_top_list
< 1.4.2
Published
Apr 13, 2006
Tracked Since
Feb 18, 2026