CVE-2005-1384

Published: May 3, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in phpCoin 1.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) search parameter to index.php, (2) phpcoinsessid parameter to login.php, (3) id, (4) dtopic_id, or (5) dcat_id to mod.php.

Affected (3)

Products: Coinsoft Technologies: Phpcoin

Coinsoft Technologies

1 product

Phpcoin

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Coinsoft Technologies Phpcoin	Version 1.2.1
Coinsoft Technologies Phpcoin	Version 1.2.1b
Coinsoft Technologies Phpcoin	Version 1.2

References (14)

http://digitalparadox.org/viewadvisories.ah?view=36

Source: cve@mitre.org

ExploitVendor Advisory

http://marc.info/?l=bugtraq&m=111473522804665&w=2

Source: cve@mitre.org

http://pridels0.blogspot.com/2006/03/phpcoin-poc.html

Source: cve@mitre.org

http://securitytracker.com/id?1013834

Source: cve@mitre.org

http://www.securityfocus.com/bid/13433

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2005/0423

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/20308

Source: cve@mitre.org

http://digitalparadox.org/viewadvisories.ah?view=36