CVE-2006-1767

CVE-2006-1767 affects nicecoder.com INDEXU 5.0.0 and 5.0.1. Multiple PHP remote file inclusion vulnerabilities allow remote attackers to execute arbitrary PHP code via a URL provided in the theme_path parameter across numerous scripts (index.php, become_editor.php, add.php, bad_link.php, browse.p...

CVE-2006-7017

CVE-2006-7017 involves multiple PHP remote file inclusion vulnerabilities in Indexu 5.0.1, triggered when an attacker supplies a URL in the admin_template_path parameter to various admin scripts (e.g., app_change_email.php, app_change_pwd.php, index.php, etc.). The underlying issue is unvalidated...

CVE-2006-0688

CVE-2006-0688 describes a PHP remote file inclusion vulnerability in the NiceCoder Indexu product, affecting versions 5.0.0 and 5.0.1. The flaw arises in application.php, allowing a remote attacker to execute arbitrary PHP code by supplying a URL in the base_path parameter. The NVD entry indicate...