Published: 02/05/2005 Updated: 11/07/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 440

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in phpCOIN 1.2.0 up to and including 1.2.1b allows remote malicious users to inject arbitrary web script or HTML via (1) the new parameter to mod.php, (2) the w parameter to mod.php, (3) the e parameter to login.php, (4) the o parameter to login.php, and possibly other scripts.

Vulnerable Product	Search on Vulmon	Subscribe to Product
coinsoft technologies phpcoin 1.2.1b
coinsoft technologies phpcoin 1.2
coinsoft technologies phpcoin 1.2.1

source: wwwsecurityfocuscom/bid/12686/info Multiple remote input-validation vulnerabilities affect phpCOIN because the application fails to properly sanitize user-supplied input before using it to carry out critical functionality An attacker may leverage these issues to manipulate and view arbitrary database contents (by exploiting vari ...

source: wwwsecurityfocuscom/bid/12686/info Multiple remote input-validation vulnerabilities affect phpCOIN because the application fails to properly sanitize user-supplied input before using it to carry out critical functionality An attacker may leverage these issues to manipulate and view arbitrary database contents (by exploiting va ...

NVD-CWE-Other http://lostmon.blogspot.com/2005/03/phpcoin-posible-sql-injection-comands.html http://forums.phpcoin.com/index.php?showtopic=4118 http://forums.phpcoin.com/index.php?showtopic=4116 http://forums.phpcoin.com/index.php?showtopic=4101 http://www.securityfocus.com/bid/12686 http://securitytracker.com/id?1013329 http://secunia.com/advisories/14439 https://exchange.xforce.ibmcloud.com/vulnerabilities/19572 https://nvd.nist.gov https://www.exploit-db.com/exploits/25174/

CVE-2005-0670

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect