CVE-2005-0669 Multiple SQL injection vulnerabilities in mod.php for phpCOIN 1.2.0 through 1.2.1b allow remote attackers to execute arbitrary SQL commands via the (1) the faq_id in the faq mod, (2) the id parameter....
HighCVSS 7.5
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in mod.php for phpCOIN 1.2.0 through 1.2.1b allow remote attackers to execute arbitrary SQL commands via the (1) the faq_id in the faq mod, (2) the id parameter in the pages mod, (3) the id parameter in the siteinfo module, (4) the topic_id parameter in the articles module, (5) the ord_id in the orders module, (6) the dom_id parameter in the domains module, or (7) the invd_id parameter in the invoices module.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| coinsoft technologies phpcoin | = 1.2 | No fix listed |
| coinsoft technologies phpcoin | = 1.2.1 | No fix listed |
| coinsoft technologies phpcoin | = 1.2.1b | No fix listed |
References
- forums.phpcoin.com
- forums.phpcoin.com patch
- forums.phpcoin.com
- lostmon.blogspot.com exploit
- 14439 exploit patch third-party-advisory
- 1013329 exploit vdb-entry
- 12686 exploit vdb-entry
- phpcoin-id-sql-injection(19571) vdb-entry