CVE-2005-4212: Undefined Security Weakness

Directory traversal vulnerability in coinincludes/db.php in phpCOIN 1.2.2 allows remote attackers to read arbitrary local files via ".." dot dot sequences in the $CCFGPKGPATHDBSE variable...

CVE-2005-4211: Undefined Security Weakness

PHP remote file inclusion vulnerability in coinincludes/db.php in phpCOIN 1.2.2 allows remote attackers to execute arbitrary PHP code via a URL in the $CCFGPKGPATHDBSE variable...