CVE-2005-4447

Affected product: phpCOIN 1.2.2. Vulnerability: SQL injection in articles_funcs.php via the rec_next parameter, enabling modification of SQL syntax and, in some environments, potential error-message disclosure after an ORDER BY clause. The original disclosure notes that command injection is not f...

CVE-2005-4447: Undefined Security Weakness

SQL injection vulnerability in articles\articlesfuncs.php in phpCOIN 1.2.2 allows remote attackers to modify SQL syntax and possibly execute SQL in limited circumstances via the recnext parameter. NOTE: the original disclosure suggests that command injection is not feasible because the injection...