7.5
CVSSv2

CVE-2005-0946

Published: 29/03/2005 Updated: 18/10/2016
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in phpCoin 1.2.1b and previous versions allows remote malicious users to execute arbitrary SQL commands via the (1) term/keywords field on the search page, (2) username or (3) e-mail field on the forgot password page, or (4) domain name on the ordering new package page.

Vulnerable Product Search on Vulmon Subscribe to Product

coinsoft technologies phpcoin 1.2

coinsoft technologies phpcoin 1.2.1

coinsoft technologies phpcoin 1.2.1b