← Back

Indexcity

indexcity

Vendor: Cityforfree • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2006-4324
1Cityforfree
1Indexcity
Apr 16, 2026
Aug 24, 2006
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in add_url2.php in CityForFree indexcity 1.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter.
CVE-2006-4323
1Cityforfree
1Indexcity
Apr 16, 2026
Aug 24, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in list.php in CityForFree indexcity 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cate_id parameter.