phpCOIN 'mod' Parameter Local File Include Vulnerability

phpCOIN is prone to local file include vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phpcoin:phpcoin";...

CVE-2010-0953

CVE-2010-0953 affects phpCOIN 1.2.1. The vulnerability is a directory traversal in mod.php via the mod parameter, enabling remote reading of arbitrary files. Documented CVSS base score is 6.8 (medium) with network exposure and no authentication. OpenVAS also describes phpCOIN as prone to local fi...

CVE-2010-0953

Directory traversal vulnerability in mod.php in phpCOIN 1.2.1 allows remote attackers to read arbitrary files via a .. dot dot in the mod parameter...