coinsoft technologies phpcoin 1.2.1 vulnerabilities and exploits

(subscribe to this query)

4.3

CVSSv2

Multiple cross-site scripting (XSS) vulnerabilities in phpCOIN 1.2.2 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the fs parameter to (1) mod.php or (2) mod_print.php.

Coinsoft Technologies Phpcoin 1.1.0 Coinsoft Technologies Phpcoin 1.1.1 Coinsoft Technologies Phpcoin 1.2.0 Coinsoft Technologies Phpcoin 1.2.1 Coinsoft Technologies Phpcoin 1.2.2

2 EDB exploits

5

CVSSv2

Directory traversal vulnerability in auxpage.php for phpCOIN 1.2.1b and previous versions allows remote malicious users to read arbitrary files via the page parameter.

Coinsoft Technologies Phpcoin 1.2.1 Coinsoft Technologies Phpcoin 1.2.1b Coinsoft Technologies Phpcoin

5

CVSSv2

phpCOIN 1.2.3 and previous versions stores messages based upon e-mail addresses, which allows remote authenticated users to read messages for other users by adding the sender's e-mail address as an "additional contact".

Coinsoft Technologies Phpcoin 1.2.1 Coinsoft Technologies Phpcoin 1.2.1b Coinsoft Technologies Phpcoin 1.2.2 Coinsoft Technologies Phpcoin 1.2

7.5

CVSSv2

Multiple SQL injection vulnerabilities in mod.php for phpCOIN 1.2.0 up to and including 1.2.1b allow remote malicious users to execute arbitrary SQL commands via the (1) the faq_id in the faq mod, (2) the id parameter in the pages mod, (3) the id parameter in the siteinfo module,...

Coinsoft Technologies Phpcoin 1.2 Coinsoft Technologies Phpcoin 1.2.1 Coinsoft Technologies Phpcoin 1.2.1b

7.5

CVSSv2

Multiple SQL injection vulnerabilities in phpCOIN 1.2.1b and previous versions allow remote malicious users to execute arbitrary SQL commands (1) via the search engine, (2) the username or email fields in the "forgotten password" feature, or (3) the domain name in a pac...

Coinsoft Technologies Phpcoin 1.2 Coinsoft Technologies Phpcoin 1.2.1b Coinsoft Technologies Phpcoin 1.2.1

7.5

CVSSv2

SQL injection vulnerability in phpCoin 1.2.1b and previous versions allows remote malicious users to execute arbitrary SQL commands via the (1) term/keywords field on the search page, (2) username or (3) e-mail field on the forgot password page, or (4) domain name on the ordering...

Coinsoft Technologies Phpcoin 1.2 Coinsoft Technologies Phpcoin 1.2.1 Coinsoft Technologies Phpcoin 1.2.1b

7.5

CVSSv2

Directory traversal vulnerability in auxpage.php in phpCoin 1.2.1b and previous versions allows remote malicious users to read and execute arbitrary files via a .. (dot dot) in the page parameter.

Coinsoft Technologies Phpcoin 1.2 Coinsoft Technologies Phpcoin 1.2.1 Coinsoft Technologies Phpcoin 1.2.1b

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in phpCOIN 1.2.0 up to and including 1.2.1b allows remote malicious users to inject arbitrary web script or HTML via (1) the new parameter to mod.php, (2) the w parameter to mod.php, (3) the e parameter to login.php, (4) the o parameter to...

Coinsoft Technologies Phpcoin 1.2.1b Coinsoft Technologies Phpcoin 1.2 Coinsoft Technologies Phpcoin 1.2.1

2 EDB exploits

7.5

CVSSv2

Multiple SQL injection vulnerabilities in phpCoin 1.2.2 allow remote malicious users to execute arbitrary SQL commands via the (1) search parameter to index.php, (2) phpcoinsessid parameter to login.php, (3) id, (4) dtopic_id, or (5) dcat_id to mod.php.

Coinsoft Technologies Phpcoin 1.2 Coinsoft Technologies Phpcoin 1.2.1 Coinsoft Technologies Phpcoin 1.2.1b

2 EDB exploits

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook