Record summary

CVE-2006-4424 has a selected CVSS score of 5.1; EIP currently links 1 catalogued exploit.

Description

PHP remote file inclusion vulnerability in coin_includes/constants.php in phpCOIN 1.2.3 allows remote attackers to execute arbitrary PHP code via the _CCFG[_PKG_PATH_INCL] parameter.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBPHPCOIN 1.2.3 - 'session_set.php' Remote File InclusionExploitDB exploitby TimqNot analyzed1 file

linked to 2 vulnerabilities

ExploitDB

PoC details

References

7