CVE-2007-0364
Multiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) error_msg parameter to (a) suggest_category.php; the (2) u parameter to (b) user_detail.php; the (3) friend_name, (4) friend_email, (5) error_msg, (6) my_name, (7) my_email, and (8) id parameters to (c) tell_friend.php; the (9) error_msg, (10) email, (11) name, and (12) subject parameters to (d) sendmail.php; the (13) email, (14) error_msg, and (15) username parameters to (e) send_pwd.php; the (16) keyword parameter to (f) search.php; the (17) error_msg, (18) username, (19) password, (20) password2, and (21) email parameters to (g) register.php; the (22) url, (23) contact_name, and (24) email parameters to (h) power_search.php; the (25) path and (26) total parameters to (i) new.php; the (27) query parameter to (j) modify.php; the (28) error_msg parameter to (k) login.php; the (29) error_msg and (30) email parameters to (l) mailing_list.php; the (31) gateway parameter to (m) upgrade.php; and another unspecified vector.
Key facts
- CVSS score
- 4.3 (v2.0)
- Severity
- MEDIUM
- CVSS vector
AV:N/AC:M/Au:N/C:N/I:P/A:N- Weakness (CWE)
- CWE-79
- EPSS score
- 2.8% (87th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2007-0366)
- Published
- January 19, 2007
- NVD last modified
- June 16, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2007-0366 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.
View on the EU Vulnerability DatabaseAffected products
- nicecoder / indexu
- nicecoder / indexu
- nicecoder / indexu
References
- http://osvdb.org/32839
- http://secunia.com/advisories/23764(Exploit, Vendor Advisory)
- http://www.osvdb.org/32838
- http://www.osvdb.org/32840
- http://www.osvdb.org/32841
- http://www.osvdb.org/32842
- http://www.osvdb.org/32843
- http://www.osvdb.org/32844
- http://www.osvdb.org/32845
- http://www.osvdb.org/32846
- http://www.osvdb.org/32847
- http://www.osvdb.org/32848
- http://www.osvdb.org/32849
- http://www.osvdb.org/32850
- http://www.osvdb.org/32851
- http://www.securityfocus.com/archive/1/457079/100/0/threaded
- http://www.securityfocus.com/bid/22084(Exploit)
- http://www.vupen.com/english/advisories/2007/0222(Vendor Advisory)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31538
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain