CVE-2005-4214

概要

参考情報

• forums.phpcoin.com/index.php
• rgod.altervista.org/phpcoin122.html · Exploit
• rgod.altervista.org/phpcoin_122_sql_xpl.html · Exploit
• secunia.com/advisories/18030 · Vendor Advisory
• securitytracker.com/id · Exploit
• osvdb.org/21726
• securityfocus.com/archive/1/419382/100/0/threaded
• vupen.com/english/advisories/2005/2888 · Vendor Advisory

phpcoin のその他の脆弱性

• CVE-2006-4425中 5.1Multiple PHP remote file inclusion vulnerabilities in phpCOIN 1.2.3 allow remote attackers to execute arbitrary PHP code via the _CCFG[_PKG_…
• CVE-2006-4424中 5.1PHP remote file inclusion vulnerability in coin_includes/constants.php in phpCOIN 1.2.3 allows remote attackers to execute arbitrary PHP cod…
• CVE-2006-2422中 5.0phpCOIN 1.2.3 and earlier stores messages based upon e-mail addresses, which allows remote authenticated users to read messages for other us…
• CVE-2006-1428中 4.3Multiple cross-site scripting (XSS) vulnerabilities in phpCOIN 1.2.2 and earlier allow remote attackers to inject arbitrary web script or HT…
• CVE-2005-4213高 7.5SQL injection vulnerability in mod.php in phpCOIN 1.2.2 allows remote attackers to execute arbitrary SQL commands via the phpcoinsessid cook…