CVE-2005-4447: Undefined Security Weakness

SQL injection vulnerability in articles\articlesfuncs.php in phpCOIN 1.2.2 allows remote attackers to modify SQL syntax and possibly execute SQL in limited circumstances via the recnext parameter. NOTE: the original disclosure suggests that command injection is not feasible because the injection...