Vulnerability record · CVE-2006-1767 · published 13 April 2006

CVE-2006-1767: Nicecoder indexu vulnerability

Nicecoder · Indexu

Multiple PHP remote file inclusion vulnerabilities in nicecoder.com INDEXU 5.0.0 and 5.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the theme_path parameter in (1) index.php, (2) become_editor.php, (3) add.php, (4) bad_link.php, (5) browse.php, (6) detail.php, (7) fav.php, (8) get_rated.php, (9) login.php, (10) mailing_list.php, (11) new.php, (12) modify.php, (13) pick.php, (14) power_search.php, (15) rating.php, (16) register.php, (17) review.php, (18) rss.php, (19) search.php, (20) send_pwd.php, (21) sendmail.php, (22) tell_friend.php, (23) top_rated.php, (24) user_detail.php, and (25) user_search.php; and the (26) base_path parameter in invoice.php.

7.5 CVSS 2.0 High EPSS 8.1% · top 5.4%

7.5CVSS 2.0 base score

8.1%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

40References, 4 tagged exploit

16 Jun 2026Last modified by NVD

Description

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Indexu Nicecoder

References

Link	Tags
http://ftp.kep.online.fr/Indexu_5.0.1_File_Inclusion_Exploit-by_King-Hacker_and-Khamaileon.txt
http://securitytracker.com/id?1015891	Exploit
http://securitytracker.com/id?1016331
http://www.osvdb.org/24596
http://www.osvdb.org/24597
http://www.osvdb.org/28406
http://www.osvdb.org/28409
http://www.osvdb.org/28410
http://www.osvdb.org/28412
http://www.osvdb.org/28413
http://www.osvdb.org/28415
http://www.osvdb.org/28416
http://www.osvdb.org/28417
http://www.osvdb.org/28419
http://www.osvdb.org/28422
http://www.osvdb.org/28425
http://www.osvdb.org/28426
http://www.osvdb.org/28427
http://www.securityfocus.com/archive/1/430599/100/0/threaded
http://www.securityfocus.com/bid/17470	Exploit
http://ftp.kep.online.fr/Indexu_5.0.1_File_Inclusion_Exploit-by_King-Hacker_and-Khamaileon.txt
http://securitytracker.com/id?1015891	Exploit
http://securitytracker.com/id?1016331
http://www.osvdb.org/24596
http://www.osvdb.org/24597
http://www.osvdb.org/28406
http://www.osvdb.org/28409
http://www.osvdb.org/28410
http://www.osvdb.org/28412
http://www.osvdb.org/28413
http://www.osvdb.org/28415
http://www.osvdb.org/28416
http://www.osvdb.org/28417
http://www.osvdb.org/28419
http://www.osvdb.org/28422
http://www.osvdb.org/28425
http://www.osvdb.org/28426
http://www.osvdb.org/28427
http://www.securityfocus.com/archive/1/430599/100/0/threaded
http://www.securityfocus.com/bid/17470	Exploit

Track CVE-2006-1767 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2006-7017Nicecoder indexu vulnerabilityMultiple PHP remote file inclusion vulnerabilities in Indexu 5.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the admin_templa…EPSS 2.8%15 Feb 2007 7.5CVE-2006-0688Nicecoder indexu vulnerabilityPHP remote file include vulnerability in application.php in nicecoder.com indexu 5.0.0 and 5.0.1 allows remote attackers to execute arbitrary PHP cod…EPSS 4.0%15 Feb 2006 5.0CVE-2007-0349Nicecoder indexu vulnerabilityDirectory traversal vulnerability in upgrade.php in nicecoder.com INDEXU 5.x allows remote attackers to include arbitrary local files via a .. (dot d…EPSS 1.6%19 Jan 2007 4.3CVE-2007-0364Nicecoder indexu cross-site scripting vulnerabilityMultiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow remote attackers to inject arbitrary web script or …EPSS 2.8%19 Jan 2007

Source: NIST National Vulnerability Database (record CVE-2006-1767), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.