CVE-2007-0364
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to inject arbitrary web…
- Published
- Updated
- Reserved
- Assigned by
- mitre
Description
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) error_msg parameter to (a) suggest_category.php; the (2) u parameter to (b) user_detail.php; the (3) friend_name, (4) friend_email, (5) error_msg, (6) my_name, (7) my_email, and (8) id parameters to (c) tell_friend.php; the (9) error_msg, (10) email, (11) name, and (12) subject parameters to (d) sendmail.php; the (13) email, (14) error_msg, and (15) username parameters to (e) send_pwd.php; the (16) keyword parameter to (f) search.php; the (17) error_msg, (18) username, (19) password, (20) password2, and (21) email parameters to (g) register.php; the (22) url, (23) contact_name, and (24) email parameters to (h) power_search.php; the (25) path and (26) total parameters to (i) new.php; the (27) query parameter to (j) modify.php; the (28) error_msg parameter to (k) login.php; the (29) error_msg and (30) email parameters to (l) mailing_list.php; the (31) gateway parameter to (m) upgrade.php; and another unspecified vector.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 2.0 | Medium4.3 | AV:N/AC:M/Au:N/C:N/I:P/A:N |
- EPSS (exploitation in 30 days)
- 2.8% · top 13% of all CVEs (3 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.3.
Weakness
Affected products
n/a
- affected n/a
References (19)
- 32846 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- ADV-2007-0222 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
- 32849 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- 32840 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- 32850 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- 32843 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- 20070116 vulnerability script indexu all versions (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
- 32845 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- 32842 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- 22084 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
- 32847 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- 32848 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- 32844 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- 32839 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- indexu-multiple-scripts-xss(31538) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
- 32838 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- 32851 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- 23764 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 32841 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2007-0364)Record last updated .