CVE-2009-4624
Published Jan 18, 2010SQL injection vulnerability in download.php in Nicecoder iDesk allows remote attackers to execute arbitrary SQL commands via the cat_id parameter, a different vector than CVE-2005…
Vendor archive
nicecoder CVEs
Beta · best-effort7 CVEs tagged to vendor nicecoder — 0 Critical, 5 High, 2 Medium, 0 Low, 0 Unrated.
CVE-2006-7017
Published Feb 15, 2007Multiple PHP remote file inclusion vulnerabilities in Indexu 5.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the admin_template_path parameter to admin/ sc…
CVE-2007-0364
Published Jan 19, 2007Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) error_msg par…
CVE-2007-0349
Published Jan 19, 2007Directory traversal vulnerability in upgrade.php in nicecoder.com INDEXU 5.x allows remote attackers to include arbitrary local files via a .. (dot dot) in the gateway parameter.
CVE-2006-1767
Published Apr 13, 2006Multiple PHP remote file inclusion vulnerabilities in nicecoder.com INDEXU 5.0.0 and 5.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the theme_path paramet…
CVE-2006-0688
Published Feb 15, 2006PHP remote file include vulnerability in application.php in nicecoder.com indexu 5.0.0 and 5.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the base_path p…
CVE-2005-3843
Published Nov 26, 2005SQL injection vulnerability in faq.php in Nicecoder iDesk 1.0 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.
Showing 1-7 of 7 CVEsPage 1 of 1