Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2567▼ 300 respecto a la semana anterior

Críticas / altas1352▲ 101 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 7 respecto a la semana anterior

Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior

8 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2019-20377	Modificada	Media (6.1)	0.65%	—	Tophub Toplist	11/1/2020	17/6/2026	TopList before 2019-09-03 allows XSS via a title.
CVE-2007-1980	Modificada	Alta (7.5)	1.1%	—	Nick Jones Topliste Module	12/4/2007	16/6/2026	SQL injection vulnerability in index.php in the Topliste 1.0 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the cid parameter.
CVE-2006-6459	Modificada	Media (6.8)	1.3%	—	Phpbb Toplist	11/12/2006	16/6/2026	Cross-site scripting (XSS) vulnerability in toplist.php in PhpBB Toplist 1.3.7 allows remote attackers to inject arbitrary HTML or web script via the (1) Name and (2) Information fields when adding a new site (toplistnew action).
CVE-2006-3923	Modificada	Baja (2.6)	1.4%	—	Fire-mouse Toplist	28/7/2006	16/6/2026	Cross-site scripting (XSS) vulnerability in add.php in Fire-Mouse Toplist 1.1 and earlier, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the Seitenname parameter.
CVE-2006-3557	Modificada	Media (5)	1.2%	—	MT Orumcek Toplist	13/7/2006	16/6/2026	MT Orumcek Toplist 2.2 stores DB/orumcektoplist.mdb under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request.
CVE-2006-2151	Modificada	Alta (7.5)	11%	—	Phpbb Group Phpbb Toplist	3/5/2006	16/6/2026	PHP remote file inclusion vulnerability in toplist.php in phpBB TopList 1.3.8 and earlier, when register_globals is enabled, allows remote attackers to include arbitrary files via the phpbb_root_path parameter.
CVE-2006-2150	Modificada	Media (6.4)	2.0%	—	Phpbb Group Phpbb Toplist	3/5/2006	16/6/2026	PHP remote file inclusion vulnerability in top/list.php in phpBB TopList 1.3.8 and earlier allows remote attackers to include arbitrary files via the returnpath parameter.
CVE-2005-3003	Modificada	Alta (7.5)	1.2%	—	Nootoplist^AI	21/9/2005	16/6/2026	SQL injection vulnerability in index.php in NooTopList 1.0.0 release 17 allows remote attackers to execute arbitrary SQL commands via the (1) o or (2) sort parameters.