Sploitus

14 exploited vulnerabilities in Phpcoin

Vulnerabilities with publicly known exploits

Vendors
Php, Phpcoin
With known exploits
14
Affected Php Con versions
= 1.3
Affected Coinsoft Technologies Phpcoin versions
= 1.2.2, 1.2, 1.2.1, 1.2.1b, 1.2.3, 1.1.0, 1.1.1, 1.2.0
Affected Phpcoin versions
= 1.2.1

Vulnerabilities with exploits

Highest CVSS first — 10 of these already have exploit code on Sploitus

CVE-2007-6177 1 exploit
CVSS 7.5 HIGH 2007-11-30FIX AVAILABLE
PHP-CON 1.3 - 'include.php' Remote File Inclusion
CVE-2005-4213 1 exploit
CVSS 7.5 HIGH 2005-12-14FIX AVAILABLE
phpCOIN 1.2.2 - 'phpcoinsessid' SQL Injection / Remote Code Execution
CVE-2005-4211 1 exploit
CVSS 7.5 HIGH 2005-12-14FIX AVAILABLE
phpCOIN 1.2.2 - CCFG[_PKG_PATH_DBSE] Remote File Inclusion
CVE-2005-1384 2 exploits
CVSS 7.5 HIGH 2005-05-02FIX AVAILABLE
phpCOIN 1.2 - 'login.php?PHPcoinsessid' SQL InjectionphpCOIN 1.2 Pages Module - Multiple SQL Injections
CVE-2005-0932
CVSS 7.5 HIGH 2005-03-29
CVE-2005-0669
CVSS 7.5 HIGH 2005-03-07FIX AVAILABLE
CVE-2010-0953 1 exploit
CVSS 6.8 MEDIUM 2010-03-09FIX AVAILABLE
PHPCOIN 1.2.1 - 'mod.php' Local File Inclusion
CVE-2006-4425 1 exploit
CVSS 5.1 MEDIUM 2006-08-29FIX AVAILABLE
PHPCOIN 1.2.3 - 'session_set.php' Remote File Inclusion
CVE-2006-4424 1 exploit
CVSS 5.1 MEDIUM 2006-08-29
PHPCOIN 1.2.3 - 'session_set.php' Remote File Inclusion
CVE-2005-4214
CVSS 5.0 MEDIUM 2005-12-14FIX AVAILABLE
CVE-2005-4212 1 exploit
CVSS 5.0 MEDIUM 2005-12-14FIX AVAILABLE
PHPCOIN 1.2.2 - '/includes/db.php?$_CCFG[_PKG_PATH_DBSE]' Traversal Arbitrary File Access
CVE-2005-0933
CVSS 5.0 MEDIUM 2005-03-29FIX AVAILABLE
CVE-2006-1428 2 exploits
CVSS 4.3 MEDIUM 2006-03-28FIX AVAILABLE
PHPCOIN 1.2 - 'mod_print.php?fs' Cross-Site ScriptingPHPCOIN 1.2 - 'mod.php?fs' Cross-Site Scripting
CVE-2005-0670 2 exploits
CVSS 4.3 MEDIUM 2005-03-07
PHPCOIN 1.2 - 'mod.php' Multiple Cross-Site Scripting VulnerabilitiesPHPCOIN 1.2 - 'login.php' Multiple Cross-Site Scripting Vulnerabilities