phpCOIN-1.2.2-Full-2005 SQL Injection

This bug can't exploited cuz the sql injection is after ORDER BY and then we can't do UNION SELECT with MySQL Server if the Server is MS-SQL try to do this 0,0; New SQL Query //------------// File Name :- coinmodulesarticelsarticlesfuncs.php Line :- 187 Var :- $recnext Fix :- Line 184 Add This...

CVE-2005-4214

phpCOIN 1.2.2 allows remote attackers to obtain the installation path via a direct request to config.php, which leaks the path in an error message because the CCFG'PKGPATHDBSE' variable is not defined...

CVE-2005-4211

PHP remote file inclusion vulnerability in coinincludes/db.php in phpCOIN 1.2.2 allows remote attackers to execute arbitrary PHP code via a URL in the $CCFGPKGPATHDBSE variable...

CVE-2005-4212

Directory traversal vulnerability in coinincludes/db.php in phpCOIN 1.2.2 allows remote attackers to read arbitrary local files via ".." dot dot sequences in the $CCFGPKGPATHDBSE variable...

CVE-2005-4211

PHP remote file inclusion in phpCOIN 1.2.2 affects coin_includes/db.php, allowing an attacker to supply a URL via the _CCFG[_PKG_PATH_DBSE] parameter to execute arbitrary PHP code. This is a code-execution exposure in the web application, with no exploitation details provided beyond the parameter...

CVE-2005-4211

PHP remote file inclusion vulnerability in coinincludes/db.php in phpCOIN 1.2.2 allows remote attackers to execute arbitrary PHP code via a URL in the $CCFGPKGPATHDBSE variable...

CVE-2005-4214

phpCOIN 1.2.2 allows remote attackers to obtain the installation path via a direct request to config.php, which leaks the path in an error message because the CCFG'PKGPATHDBSE' variable is not defined...

CVE-2005-4214

CVE-2005-4214 concerns phpCOIN 1.2.2. Affected component: installation/config flow via config.php. Root cause: the _CCFG['_PKG_PATH_DBSE'] variable is not defined, causing an error message that leaks the installation path to remote attackers. Impact: partial disclosure of information (installatio...

CVE-2005-4213

CVE-2005-4213 describes a SQL injection in mod.php of phpCOIN 1.2.2 exploitable via the phpcoinsessid cookie, allowing remote SQL commands. This affects phpCOIN 1.2.2 prior to any fixes; remediation is not detailed in the provided documents, but related Nessus entries reference a 1.2.2 fix releas...

CVE-2005-4212

CVE-2005-4212 affects phpCOIN 1.2.2. A directory traversal vulnerability in coin_includes/db.php permits remote attackers to read arbitrary local files by supplying ".." sequences in the $_CCFG[_PKG_PATH_DBSE] variable. This is a server-side path traversal in the PHP include logic, enabling expos...

phpCOIN 1.2.2 multiple vulnerabilities

PhpCOIN 1.2.2 arbitrary remotelocal inclusion / blind sql injection / path disclosure software: site: http://www.phpcoin.com/ description: "a free software package originally designed for web-hosting resellers to handle clients, orders, invoices, notes and helpdesk, but no longer limited to hosti...

CVE-2005-4214: Exposure of Sensitive Information to an Unauthorized Actor

phpCOIN 1.2.2 allows remote attackers to obtain the installation path via a direct request to config.php, which leaks the path in an error message because the CCFG'PKGPATHDBSE' variable is not defined...

CVE-2005-4212: Undefined Security Weakness

Directory traversal vulnerability in coinincludes/db.php in phpCOIN 1.2.2 allows remote attackers to read arbitrary local files via ".." dot dot sequences in the $CCFGPKGPATHDBSE variable...

phpCOIN < 1.2.2 2005-12-13 Fix-File Multiple Vulnerabilities

The remote host appears to be running phpCOIN, a software package for web-hosting resellers to handle clients, orders, helpdesk queries, and the like. The version of phpCOIN installed on the remote host fails to sanitize user-supplied input to the 'CCFGPKGPATHDBSE' parameter of the 'config.php'...

CVE-2005-4213: Undefined Security Weakness

SQL injection vulnerability in mod.php in phpCOIN 1.2.2 allows remote attackers to execute arbitrary SQL commands via the phpcoinsessid cookie...

CVE-2005-4211: Undefined Security Weakness

PHP remote file inclusion vulnerability in coinincludes/db.php in phpCOIN 1.2.2 allows remote attackers to execute arbitrary PHP code via a URL in the $CCFGPKGPATHDBSE variable...

phpCOIN 1.2.2 - CCFG[_PKG_PATH_DBSE] Remote File Inclusion

phpCOIN 1.2.2 - CCFGPKGPATHDBSE Remote File Inclusion source: https://www.securityfocus.com/bid/15831/info PhpCOIN is prone to a file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include...

phpCOIN 1.2.2 - CCFG[_PKG_PATH_DBSE] Remote File Inclusion

source: https://www.securityfocus.com/bid/15831/info PhpCOIN is prone to a file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote PHP code and execute it in the context ...

phpCOIN 1.2.2 (phpcoinsessid) SQL Inj / Remote Code Execution Exploit

No description provided by source. ?php ---phpcoin122sqlxpl.php phpCOIN 1.2.2 phpcoinsessid blind SQL injection / remote code execution coded by rgod site: http://rgod.altervista.org - this works with magicquotesgpc off usage: launch from Apache, fill in requested fields, then go! Sun-Tzu:"When...

phpCOIN 1.2.2 (phpcoinsessid) SQL Inj / Remote Code Execution Exploit

Exploit for unknown platform in category web applications ===================================================================== phpCOIN 1.2.2 phpcoinsessid SQL Inj / Remote Code Execution Exploit ===================================================================== this works with magicquotesgpc...