CVE-2006-7017

Multiple PHP remote file inclusion vulnerabilities in Indexu 5.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the admintemplatepath parameter to admin/ scripts 1 appchangeemail.php, 2 appchangepwd.php, 3 appmodrewrite.php, 4 apppagecaching.php, 5 appsetup.php, 6 catadd.php,...

CVE-2006-7017

CVE-2006-7017 involves multiple PHP remote file inclusion vulnerabilities in Indexu 5.0.1, triggered when an attacker supplies a URL in the admin_template_path parameter to various admin scripts (e.g., app_change_email.php, app_change_pwd.php, index.php, etc.). The underlying issue is unvalidated...

CVE-2006-7017

Multiple PHP remote file inclusion vulnerabilities in Indexu 5.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the admintemplatepath parameter to admin/ scripts 1 appchangeemail.php, 2 appchangepwd.php, 3 appmodrewrite.php, 4 apppagecaching.php, 5 appsetup.php, 6 catadd.php,...

CVE-2006-7017: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Indexu 5.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the admintemplatepath parameter to admin/ scripts 1 appchangeemail.php, 2 appchangepwd.php, 3 appmodrewrite.php, 4 apppagecaching.php, 5 appsetup.php, 6 catadd.php,...

indexu-xss.txt

vulnerability script indexu all versions Found by :SwEET-DeViL & viP HaCkEr & HaCkEr sUn TeaM AL-GaRNi Application : indexu version : all versions URL : http://www.nicecoder.com/ google : "Powered by INDEXU 5." Exploits : |//1\| in upgrade.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 errormsg parameter to a suggestcategory.php; the 2 u parameter to b userdetail.php; the 3 friendname, 4 friendemail, 5 errormsg, 6...

CVE-2007-0364

Multiple cross-site scripting XSS vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 errormsg parameter to a suggestcategory.php; the 2 u parameter to b userdetail.php; the 3 friendname, 4 friendemail, 5 errormsg, 6...

CVE-2007-0364

CVE-2007-0364 describes multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier, allowing remote attackers to inject arbitrary script/HTML via numerous parameters across several pages (e.g., suggest_category.php, user_detail.php, tell_friend.php, sendmail.php, ...

CVE-2007-0349

Directory traversal vulnerability in upgrade.php in nicecoder.com INDEXU 5.x allows remote attackers to include arbitrary local files via a .. dot dot in the gateway parameter...

Directory traversal

Directory traversal vulnerability in upgrade.php in nicecoder.com INDEXU 5.x allows remote attackers to include arbitrary local files via a .. dot dot in the gateway parameter...

CVE-2007-0364: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 errormsg parameter to a suggestcategory.php; the 2 u parameter to b userdetail.php; the 3 friendname, 4 friendemail, 5 errormsg, 6...

CVE-2007-0349: Undefined Security Weakness

Directory traversal vulnerability in upgrade.php in nicecoder.com INDEXU 5.x allows remote attackers to include arbitrary local files via a .. dot dot in the gateway parameter...

CVE-2007-0349

Directory traversal vulnerability in upgrade.php in nicecoder.com INDEXU 5.x allows remote attackers to include arbitrary local files via a .. dot dot in the gateway parameter...

CVE-2007-0349

CVE-2007-0349 affects nicecoder.com INDEXU 5.x via upgrade.php. The gateway parameter allows directory traversal (..), enabling remote attackers to include arbitrary local files. This is documented across NVD and CVE records as a directory traversal vulnerability in upgrade.php, with the impact l...

vulnerability script indexu all versions

vulnerability script indexu all versions Found by :SwEET-DeViL & viP HaCkEr & HaCkEr sUn TeaM AL-GaRNi Application : indexu version : all versions URL : http://www.nicecoder.com/ google : "Powered by INDEXU 5." Exploits : |//1| in upgrade.php...

Indexu 5.05.3 - login.php?Error_msg Cross-Site Scripting

Indexu 5.05.3 - login.php?Errormsg Cross-Site Scripting source: https://www.securityfocus.com/bid/22084/info Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script...

Indexu 5.05.3 - register.php Multiple Cross-Site Scripting Vulnerabilities

Indexu 5.05.3 - register.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/22084/info Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have...

Indexu 5.05.3 - upgrade.php?gateway Cross-Site Scripting

Indexu 5.05.3 - upgrade.php?gateway Cross-Site Scripting source: https://www.securityfocus.com/bid/22084/info Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script...

Indexu 5.05.3 - user_detail.php?u Cross-Site Scripting

Indexu 5.05.3 - userdetail.php?u Cross-Site Scripting source: https://www.securityfocus.com/bid/22084/info Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script cod...

Indexu 5.0/5.3 - 'search.php?keyword' Cross-Site Scripting

source: https://www.securityfocus.com/bid/22084/info Indexu is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in th...