Lucene search
+L

92 matches found

Exploit DB
Exploit DB
•added 2006/04/04 12:00 a.m.•50 views

INDEXU 5.0.1 - 'base_path' Remote File Inclusion

!/usr/bin/perl INDEXU perl indexu.pl http://target.com/indexu/ http://target.com/cmd.txt cmd cmd shell example: cmd shell variable: $GETcmd; greetz:echo|staffy3dips,theday,moby,comex,z3r0byt3,c-a-s-e,Sto,lirva32,anonymous,kaiten,an0maly,SinChan,sakitjiwa,rizal,etc Contact: eufratoatgmail.com...

5.8AI score
SaveExploits0
Prion
Prion
•added 2006/02/15 11:06 a.m.•30 views

Remote file inclusion

PHP remote file include vulnerability in application.php in nicecoder.com indexu 5.0.0 and 5.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the basepath parameter...

7.5CVSS8.1AI score0.0398EPSS
SaveExploits1References9Affected Software1
Cvelist
Cvelist
•added 2006/02/15 11:00 a.m.•42 views

CVE-2006-0688

PHP remote file include vulnerability in application.php in nicecoder.com indexu 5.0.0 and 5.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the basepath parameter...

7.6AI score0.0398EPSS
SaveExploits1References9
CVE
CVE
•added 2006/02/15 11:00 a.m.•59 views

CVE-2006-0688

CVE-2006-0688 describes a PHP remote file inclusion vulnerability in the NiceCoder Indexu product, affecting versions 5.0.0 and 5.0.1. The flaw arises in application.php, allowing a remote attacker to execute arbitrary PHP code by supplying a URL in the base_path parameter. The NVD entry indicate...

7.5CVSS7.6AI score0.0398EPSS
SaveExploits1References9Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/02/15 12:00 a.m.•7 views

CVE-2006-0688: Undefined Security Weakness

PHP remote file include vulnerability in application.php in nicecoder.com indexu 5.0.0 and 5.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the basepath parameter...

7.5CVSS6.4AI score0.0398EPSS
SaveExploits1References1
securityvulns
securityvulns
•added 2006/02/10 12:00 a.m.•131 views

[ECHO_ADV_27$2006] Indexu <= 5.0.1 Remote File Inclusion

/ / | | / // / | | Y / | / / /| / / / / / / .OR.ID ECHOADV27$2006 --------------------------------------------------------------------------- ECHOADV27$2006 Indexu = 5.0.1 Remote File Inclusion --------------------------------------------------------------------------- Author : M.Hasran Addahroni...

0.6AI score
SaveExploits0
NVD
NVD
•added 2001/06/27 4:00 a.m.•15 views

CVE-2001-0451

INDEXU 2.0 beta and earlier allows remote attackers to bypass authentication and gain privileges by setting the cookieadminauthenticated cookie value to 1...

7.5CVSS7.2AI score0.02054EPSS
SaveExploits0References2
CVE
CVE
•added 2001/05/24 4:00 a.m.•52 views

CVE-2001-0451

The CVE-2001-0451 entry concerns INDEXU 2.0 beta and earlier. Affected component: authentication/session handling via the cookie_admin_authenticated cookie. Root cause: setting the cookie value to 1 allows remote attackers to bypass authentication and gain privileges. Documented impact: privilege...

7.5CVSS7.6AI score0.02054EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2001/05/24 4:00 a.m.•23 views

CVE-2001-0451

INDEXU 2.0 beta and earlier allows remote attackers to bypass authentication and gain privileges by setting the cookieadminauthenticated cookie value to 1...

7.2AI score0.02054EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2001/05/24 12:00 a.m.•4 views

CVE-2001-0451: Undefined Security Weakness

INDEXU 2.0 beta and earlier allows remote attackers to bypass authentication and gain privileges by setting the cookieadminauthenticated cookie value to 1...

7.5CVSS5.9AI score0.02054EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2001/03/11 12:00 a.m.•113 views

INDEXU Authentication By-Pass

UNDERSEC SECURITY ADVISORY 4th March 20001 ======================================================================= PROGRAM: INDEXU VERSIONS: All versions prior to 2.0Beta 2.0Beta included OS: All REMOTE: YES LOCAL: YES CLASS: Authentication bypass POSTED BY: Sp4rK [email protected] BACKGROUND...

7.6AI score
SaveExploits0
securityvulns
securityvulns
•added 2001/03/11 12:00 a.m.•40 views

Дырка в INDEXU (Admin cookie)

Сведения о том является ли клиент даминистратором хранятся в cookie...

1.1AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder