CVE-2005-4212
phpCOIN 1.2.2 - Directory Traversal via $_CCFG[_PKG_PATH_DBSE] Variable
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2005-4212. PoCs published by [email protected].
AI-analyzed exploit summary This exploit demonstrates a file inclusion vulnerability in PhpCOIN due to improper input sanitization. It allows an attacker to include arbitrary local files or execute remote PHP code via directory traversal sequences.
Description
Directory traversal vulnerability in coin_includes/db.php in phpCOIN 1.2.2 allows remote attackers to read arbitrary local files via ".." (dot dot) sequences in the $_CCFG[_PKG_PATH_DBSE] variable.
Exploits (1)
This exploit demonstrates a file inclusion vulnerability in PhpCOIN due to improper input sanitization. It allows an attacker to include arbitrary local files or execute remote PHP code via directory traversal sequences.