Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
phpcoin vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2007-0861
PHP remote file inclusion vulnerability in modules/mail/index.php in phpCOIN RC-1 and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the _CCFG['_PKG_PATH_MDLS'] parameter. NOTE: this issue has been disputed by a reliable third...
Phpcoin Phpcoin
NA
CVE-2006-1428
Multiple cross-site scripting (XSS) vulnerabilities in phpCOIN 1.2.2 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the fs parameter to (1) mod.php or (2) mod_print.php.
Coinsoft Technologies Phpcoin 1.1.0
Coinsoft Technologies Phpcoin 1.1.1
Coinsoft Technologies Phpcoin 1.2.0
Coinsoft Technologies Phpcoin 1.2.1
Coinsoft Technologies Phpcoin 1.2.2
2 EDB exploits
NA
CVE-2010-0953
Directory traversal vulnerability in mod.php in phpCOIN 1.2.1 allows remote malicious users to read arbitrary files via a .. (dot dot) in the mod parameter.
Phpcoin Phpcoin 1.2.1
1 EDB exploit
NA
CVE-2006-2422
phpCOIN 1.2.3 and previous versions stores messages based upon e-mail addresses, which allows remote authenticated users to read messages for other users by adding the sender's e-mail address as an "additional contact".
Coinsoft Technologies Phpcoin 1.2.1
Coinsoft Technologies Phpcoin 1.2.1b
Coinsoft Technologies Phpcoin 1.2.2
Coinsoft Technologies Phpcoin 1.2
NA
CVE-2005-0933
Directory traversal vulnerability in auxpage.php for phpCOIN 1.2.1b and previous versions allows remote malicious users to read arbitrary files via the page parameter.
Coinsoft Technologies Phpcoin 1.2.1
Coinsoft Technologies Phpcoin 1.2.1b
Coinsoft Technologies Phpcoin
NA
CVE-2005-0669
Multiple SQL injection vulnerabilities in mod.php for phpCOIN 1.2.0 up to and including 1.2.1b allow remote malicious users to execute arbitrary SQL commands via the (1) the faq_id in the faq mod, (2) the id parameter in the pages mod, (3) the id parameter in the siteinfo module,...
Coinsoft Technologies Phpcoin 1.2
Coinsoft Technologies Phpcoin 1.2.1
Coinsoft Technologies Phpcoin 1.2.1b
NA
CVE-2005-1384
Multiple SQL injection vulnerabilities in phpCoin 1.2.2 allow remote malicious users to execute arbitrary SQL commands via the (1) search parameter to index.php, (2) phpcoinsessid parameter to login.php, (3) id, (4) dtopic_id, or (5) dcat_id to mod.php.
Coinsoft Technologies Phpcoin 1.2
Coinsoft Technologies Phpcoin 1.2.1
Coinsoft Technologies Phpcoin 1.2.1b
2 EDB exploits
NA
CVE-2005-0932
Multiple SQL injection vulnerabilities in phpCOIN 1.2.1b and previous versions allow remote malicious users to execute arbitrary SQL commands (1) via the search engine, (2) the username or email fields in the "forgotten password" feature, or (3) the domain name in a pac...
Coinsoft Technologies Phpcoin 1.2
Coinsoft Technologies Phpcoin 1.2.1b
Coinsoft Technologies Phpcoin 1.2.1
NA
CVE-2005-0946
SQL injection vulnerability in phpCoin 1.2.1b and previous versions allows remote malicious users to execute arbitrary SQL commands via the (1) term/keywords field on the search page, (2) username or (3) e-mail field on the forgot password page, or (4) domain name on the ordering...
Coinsoft Technologies Phpcoin 1.2
Coinsoft Technologies Phpcoin 1.2.1
Coinsoft Technologies Phpcoin 1.2.1b
NA
CVE-2005-0947
Directory traversal vulnerability in auxpage.php in phpCoin 1.2.1b and previous versions allows remote malicious users to read and execute arbitrary files via a .. (dot dot) in the page parameter.
Coinsoft Technologies Phpcoin 1.2
Coinsoft Technologies Phpcoin 1.2.1
Coinsoft Technologies Phpcoin 1.2.1b
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
validation
CVE-2024-34413
CVE-2024-34089
CVE-2024-33408
local
SQL
CVE-2024-0402
CVE-2024-33910
CVE-2024-31848
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »