CVE-2005-1384

phpCoin 1.2.2 - SQL Injection

Title source: llm

Description

Multiple SQL injection vulnerabilities in phpCoin 1.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) search parameter to index.php, (2) phpcoinsessid parameter to login.php, (3) id, (4) dtopic_id, or (5) dcat_id to mod.php.

Exploits (2)

exploitdb WORKING POC VERIFIED

by Dcrab · textwebappsphp

https://www.exploit-db.com/exploits/25569

View Code ZIP pw:eip

exploitdb WRITEUP VERIFIED

by Dcrab · textwebappsphp

https://www.exploit-db.com/exploits/25568

View Code ZIP pw:eip

References (7)

Core 7

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/20308

Mailing List mailing-list x_refsource_bugtraq

http://marc.info/?l=bugtraq&m=111473522804665&w=2

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1013834

Third Party Advisory x_refsource_misc

http://pridels0.blogspot.com/2006/03/phpcoin-poc.html

Exploit, Vendor Advisory x_refsource_misc

http://digitalparadox.org/viewadvisories.ah?view=36

Exploit vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/13433

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2005/0423

Scores

EPSS 0.0245

EPSS Percentile 85.3%

Details

Status published

Products (3)

coinsoft_technologies/phpcoin 1.2

coinsoft_technologies/phpcoin 1.2.1

coinsoft_technologies/phpcoin 1.2.1b

Published May 03, 2005

Tracked Since Feb 18, 2026