CVE-2005-0670

概要

参考情報

• forums.phpcoin.com/index.php
• forums.phpcoin.com/index.php · Patch
• forums.phpcoin.com/index.php
• lostmon.blogspot.com/2005/03/phpcoin-posible-sql-injection-comands.html
• secunia.com/advisories/14439 · Exploit
• securitytracker.com/id · Exploit
• securityfocus.com/bid/12686 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/19572

phpcoin のその他の脆弱性

• CVE-2006-4425中 5.1Multiple PHP remote file inclusion vulnerabilities in phpCOIN 1.2.3 allow remote attackers to execute arbitrary PHP code via the _CCFG[_PKG_…
• CVE-2006-4424中 5.1PHP remote file inclusion vulnerability in coin_includes/constants.php in phpCOIN 1.2.3 allows remote attackers to execute arbitrary PHP cod…
• CVE-2006-2422中 5.0phpCOIN 1.2.3 and earlier stores messages based upon e-mail addresses, which allows remote authenticated users to read messages for other us…
• CVE-2006-1428中 4.3Multiple cross-site scripting (XSS) vulnerabilities in phpCOIN 1.2.2 and earlier allow remote attackers to inject arbitrary web script or HT…
• CVE-2005-4214中 5.0phpCOIN 1.2.2 allows remote attackers to obtain the installation path via a direct request to config.php, which leaks the path in an error m…