Indexu Security Vulnerabilities and Issues — Indexu CVE List

Lucene search

NicecoderIndexu

5 matches found

CVE•added 2007/01/19 7:28 p.m.•131 views

CVE-2007-0364

Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) error_msg parameter to (a) suggest_category.php; the (2) u parameter to (b) user_detail.php; the (3) friend_name, (4) friend_email, (...

4.3CVSS5.9AI score0.02529EPSS

CVE•added 2007/01/19 12:28 a.m.•36 views

CVE-2007-0349

Directory traversal vulnerability in upgrade.php in nicecoder.com INDEXU 5.x allows remote attackers to include arbitrary local files via a .. (dot dot) in the gateway parameter.

5CVSS6.6AI score0.00181EPSS

CVE•added 2006/04/13 10:2 a.m.•34 views

CVE-2006-1767

Multiple PHP remote file inclusion vulnerabilities in nicecoder.com INDEXU 5.0.0 and 5.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the theme_path parameter in (1) index.php, (2) become_editor.php, (3) add.php, (4) bad_link.php, (5) browse.php, (6) detail.php, (7) fav.php, ...

7.5CVSS7.7AI score0.08103EPSS

CVE•added 2007/02/15 2:28 a.m.•34 views

CVE-2006-7017

Multiple PHP remote file inclusion vulnerabilities in Indexu 5.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the admin_template_path parameter to admin/ scripts (1) app_change_email.php, (2) app_change_pwd.php, (3) app_mod_rewrite.php, (4) app_page_caching.php, (5) app_setup...

7.5CVSS7.7AI score0.03067EPSS

CVE•added 2006/02/15 11:6 a.m.•33 views

CVE-2006-0688

PHP remote file include vulnerability in application.php in nicecoder.com indexu 5.0.0 and 5.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the base_path parameter.

7.5CVSS7.6AI score0.10298EPSS