Vulnerabilities > CVE-2006-0688 - Remote File Include vulnerability in Nicecoder Indexu 5.0.0/5.0.1
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
PHP remote file include vulnerability in application.php in nicecoder.com indexu 5.0.0 and 5.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the base_path parameter.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |
Exploit-Db
| description | INDEXU <= 5.0.1 (admin_template_path) Remote Include Vulnerabilities. CVE-2006-0688,CVE-2006-1767,CVE-2006-7017. Webapps exploit for php platform |
| id | EDB-ID:1925 |
| last seen | 2016-01-31 |
| modified | 2006-06-18 |
| published | 2006-06-18 |
| reporter | CrAsh_oVeR_rIdE |
| source | https://www.exploit-db.com/download/1925/ |
| title | INDEXU <= 5.0.1 admin_template_path Remote Include Vulnerabilities |
References
- http://echo.or.id/adv/adv26-K-159-2006.txt
- http://echo.or.id/adv/adv27-K-159-2006.txt
- http://secunia.com/advisories/18752
- http://securitytracker.com/id?1015607
- http://www.osvdb.org/22989
- http://www.securityfocus.com/archive/1/424549/100/0/threaded
- http://www.securityfocus.com/bid/16565
- http://www.vupen.com/english/advisories/2006/0494
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24603