← Database

CVE-2009-2111

CRITICAL CVSS: 10.0 Published: 2009-06-18 Modified: 2026-06-16

Description

Static code injection vulnerability in add_reg.php in DB Top Sites 1.0 allows remote attackers to inject arbitrary PHP code via a crafted (1) url and (2) location parameter.

Affected Platforms

Jnmsolutions Db Top Sites

Weakness Type

CWE-94

References