Nicecoder Indexu vulnerabilities
5 known vulnerabilities affecting nicecoder/indexu.
Total CVEs
5
CISA KEV
0
Public exploits
4
Exploited in wild
0
Severity breakdown
HIGH3MEDIUM2
Vulnerabilities
Page 1 of 1
CVE-2006-1767P3HIGHCVSS 7.5PoCv5.0v5.0.12006-04-13
CVE-2006-1767 [HIGH] CVE-2006-1767: Multiple PHP remote file inclusion vulnerabilities in nicecoder.com INDEXU 5.0.0 and 5.0.1 allow rem
Multiple PHP remote file inclusion vulnerabilities in nicecoder.com INDEXU 5.0.0 and 5.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the theme_path parameter in (1) index.php, (2) become_editor.php, (3) add.php, (4) bad_link.php, (5) browse.php, (6) detail.php, (7) fav.php, (8) get_rated.php, (9) login.php, (10) mailing_list.php, (11) ne
nvd
CVE-2006-7017P3HIGHCVSS 7.5PoCv5.0.12007-02-15
CVE-2006-7017 [HIGH] CVE-2006-7017: Multiple PHP remote file inclusion vulnerabilities in Indexu 5.0.1 allow remote attackers to execute
Multiple PHP remote file inclusion vulnerabilities in Indexu 5.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the admin_template_path parameter to admin/ scripts (1) app_change_email.php, (2) app_change_pwd.php, (3) app_mod_rewrite.php, (4) app_page_caching.php, (5) app_setup.php, (6) cat_add.php, (7) cat_delete.php, (8) cat_edit.php, (9)
nvd
CVE-2006-0688P3HIGHCVSS 7.5PoCv5.0.0v5.0.12006-02-15
CVE-2006-0688 [HIGH] CVE-2006-0688: PHP remote file include vulnerability in application.php in nicecoder.com indexu 5.0.0 and 5.0.1 all
PHP remote file include vulnerability in application.php in nicecoder.com indexu 5.0.0 and 5.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the base_path parameter.
nvd
CVE-2007-0364P4MEDIUMCVSS 4.3PoC≤ 5.3v5.0+1 more2007-01-19
CVE-2007-0364 [MEDIUM] CWE-79 CVE-2007-0364: Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow re
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) error_msg parameter to (a) suggest_category.php; the (2) u parameter to (b) user_detail.php; the (3) friend_name, (4) friend_email, (5) error_msg, (6) my_name, (7) my_email, and (8) id par
nvd
CVE-2007-0349P4MEDIUMCVSS 5.0≤ 5.02007-01-19
CVE-2007-0349 [MEDIUM] CVE-2007-0349: Directory traversal vulnerability in upgrade.php in nicecoder.com INDEXU 5.x allows remote attackers
Directory traversal vulnerability in upgrade.php in nicecoder.com INDEXU 5.x allows remote attackers to include arbitrary local files via a .. (dot dot) in the gateway parameter.
nvd