7.5
CVSSv2

CVE-2005-0932

Published: 02/05/2005 Updated: 08/03/2011
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Multiple SQL injection vulnerabilities in phpCOIN 1.2.1b and previous versions allow remote malicious users to execute arbitrary SQL commands (1) via the search engine, (2) the username or email fields in the "forgotten password" feature, or (3) the domain name in a package order.

Vulnerable Product Search on Vulmon Subscribe to Product

coinsoft technologies phpcoin 1.2

coinsoft technologies phpcoin 1.2.1b

coinsoft technologies phpcoin 1.2.1