CVE-2007-0364
CVE-2007-0364
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) error_msg parameter to (a) suggest_category.php; the (2) u parameter to (b) user_detail.php; the (3) friend_name, (4) friend_email, (5) error_msg, (6) my_name, (7) my_email, and (8) id parameters to (c) tell_friend.php; the (9) error_msg, (10) email, (11) name, and (12) subject parameters to (d) sendmail.php; the (13) email, (14) error_msg, and (15) username parameters to (e) send_pwd.php; the (16) keyword parameter to (f) search.php; the (17) error_msg, (18) username, (19) password, (20) password2, and (21) email parameters to (g) register.php; the (22) url, (23) contact_name, and (24) email parameters to (h) power_search.php; the (25) path and (26) total parameters to (i) new.php; the (27) query parameter to (j) modify.php; the (28) error_msg parameter to (k) login.php; the (29) error_msg and (30) email parameters to (l) mailing_list.php; the (31) gateway parameter to (m) upgrade.php; and another unspecified vector.
Affected products
n/a · n/apublic PoCs found — 12
exploitdbwww.exploit-db.com/exploits/29489unverifiedexploitdbwww.exploit-db.com/exploits/29488unverifiedexploitdbwww.exploit-db.com/exploits/29487unverifiedexploitdbwww.exploit-db.com/exploits/29486unverifiedexploitdbwww.exploit-db.com/exploits/29485unverifiedexploitdbwww.exploit-db.com/exploits/29484unverifiedexploitdbwww.exploit-db.com/exploits/29481unverifiedexploitdbwww.exploit-db.com/exploits/29483unverifiedexploitdbwww.exploit-db.com/exploits/29478unverifiedexploitdbwww.exploit-db.com/exploits/29480unverifiedexploitdbwww.exploit-db.com/exploits/29477unverifiedexploitdbwww.exploit-db.com/exploits/29479unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →References
http://osvdb.org/32839http://secunia.com/advisories/23764https://exchange.xforce.ibmcloud.com/vulnerabilities/31538http://www.osvdb.org/32838http://www.osvdb.org/32840http://www.osvdb.org/32841http://www.osvdb.org/32842http://www.osvdb.org/32843http://www.osvdb.org/32844http://www.osvdb.org/32845http://www.osvdb.org/32846http://www.osvdb.org/32847