CVE-2005-1384

Description

Multiple SQL injection vulnerabilities in phpCoin 1.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) search parameter to index.php, (2) phpcoinsessid parameter to login.php, (3) id, (4) dtopic_id, or (5) dcat_id to mod.php.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/20308

https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-1387

http://www.vupen.com/english/advisories/2005/0423

http://www.securityfocus.com/bid/13433

http://securitytracker.com/id?1013834

http://pridels0.blogspot.com/2006/03/phpcoin-poc.html

http://marc.info/?l=bugtraq&m=111473522804665&w=2

http://digitalparadox.org/viewadvisories.ah?view=36

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS