Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
phpcoin phpcoin 1.2.1 vulnerabilities and exploits
(subscribe to this query)
6.8
CVSSv2
CVE-2010-0953
Directory traversal vulnerability in mod.php in phpCOIN 1.2.1 allows remote malicious users to read arbitrary files via a .. (dot dot) in the mod parameter.
Phpcoin Phpcoin 1.2.1
1 EDB exploit
5
CVSSv2
CVE-2005-0933
Directory traversal vulnerability in auxpage.php for phpCOIN 1.2.1b and previous versions allows remote malicious users to read arbitrary files via the page parameter.
Coinsoft Technologies Phpcoin 1.2.1
Coinsoft Technologies Phpcoin 1.2.1b
Coinsoft Technologies Phpcoin
4.3
CVSSv2
CVE-2006-1428
Multiple cross-site scripting (XSS) vulnerabilities in phpCOIN 1.2.2 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the fs parameter to (1) mod.php or (2) mod_print.php.
Coinsoft Technologies Phpcoin 1.1.0
Coinsoft Technologies Phpcoin 1.1.1
Coinsoft Technologies Phpcoin 1.2.0
Coinsoft Technologies Phpcoin 1.2.1
Coinsoft Technologies Phpcoin 1.2.2
2 EDB exploits
5
CVSSv2
CVE-2006-2422
phpCOIN 1.2.3 and previous versions stores messages based upon e-mail addresses, which allows remote authenticated users to read messages for other users by adding the sender's e-mail address as an "additional contact".
Coinsoft Technologies Phpcoin 1.2.1
Coinsoft Technologies Phpcoin 1.2.1b
Coinsoft Technologies Phpcoin 1.2.2
Coinsoft Technologies Phpcoin 1.2
7.5
CVSSv2
CVE-2005-0932
Multiple SQL injection vulnerabilities in phpCOIN 1.2.1b and previous versions allow remote malicious users to execute arbitrary SQL commands (1) via the search engine, (2) the username or email fields in the "forgotten password" feature, or (3) the domain name in a pac...
Coinsoft Technologies Phpcoin 1.2
Coinsoft Technologies Phpcoin 1.2.1b
Coinsoft Technologies Phpcoin 1.2.1
7.5
CVSSv2
CVE-2005-0946
SQL injection vulnerability in phpCoin 1.2.1b and previous versions allows remote malicious users to execute arbitrary SQL commands via the (1) term/keywords field on the search page, (2) username or (3) e-mail field on the forgot password page, or (4) domain name on the ordering...
Coinsoft Technologies Phpcoin 1.2
Coinsoft Technologies Phpcoin 1.2.1
Coinsoft Technologies Phpcoin 1.2.1b
7.5
CVSSv2
CVE-2005-0947
Directory traversal vulnerability in auxpage.php in phpCoin 1.2.1b and previous versions allows remote malicious users to read and execute arbitrary files via a .. (dot dot) in the page parameter.
Coinsoft Technologies Phpcoin 1.2
Coinsoft Technologies Phpcoin 1.2.1
Coinsoft Technologies Phpcoin 1.2.1b
7.5
CVSSv2
CVE-2005-1384
Multiple SQL injection vulnerabilities in phpCoin 1.2.2 allow remote malicious users to execute arbitrary SQL commands via the (1) search parameter to index.php, (2) phpcoinsessid parameter to login.php, (3) id, (4) dtopic_id, or (5) dcat_id to mod.php.
Coinsoft Technologies Phpcoin 1.2
Coinsoft Technologies Phpcoin 1.2.1
Coinsoft Technologies Phpcoin 1.2.1b
2 EDB exploits
7.5
CVSSv2
CVE-2005-0669
Multiple SQL injection vulnerabilities in mod.php for phpCOIN 1.2.0 up to and including 1.2.1b allow remote malicious users to execute arbitrary SQL commands via the (1) the faq_id in the faq mod, (2) the id parameter in the pages mod, (3) the id parameter in the siteinfo module,...
Coinsoft Technologies Phpcoin 1.2
Coinsoft Technologies Phpcoin 1.2.1
Coinsoft Technologies Phpcoin 1.2.1b
4.3
CVSSv2
CVE-2005-0670
Cross-site scripting (XSS) vulnerability in phpCOIN 1.2.0 up to and including 1.2.1b allows remote malicious users to inject arbitrary web script or HTML via (1) the new parameter to mod.php, (2) the w parameter to mod.php, (3) the e parameter to login.php, (4) the o parameter to...
Coinsoft Technologies Phpcoin 1.2.1b
Coinsoft Technologies Phpcoin 1.2
Coinsoft Technologies Phpcoin 1.2.1
2 EDB exploits
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-33572
CVE-2024-24919
CVE-2024-0230
CVE-2024-32714
HTML injection
local file inclusion
CVE-2024-31098
CVE-2024-31244
privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started