Loading vulnerability details…
CVSS v3.1
N/A
EPSS
3.75%
Published
Jun 18, 2009
Modified
Apr 22, 2026
Public PoC / Exploit (2)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
Static code injection vulnerability in add_reg.php in DB Top Sites 1.0 allows remote attackers to inject arbitrary PHP code via a crafted (1) url and (2) location parameter.
Weaknesses (CWE)
Affected Products (1)
References (8)