CVE

Id
11875  
CVE No.
CVE-2005-0669  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in mod.php for phpCOIN 1.2.0 through 1.2.1b allow remote attackers to execute arbitrary SQL commands via the (1) the faq_id in the faq mod, (2) the id parameter in the pages mod, (3) the id parameter in the siteinfo module, (4) the topic_id parameter in the articles module, (5) the ord_id in the orders module, (6) the dom_id parameter in the domains module, or (7) the invd_id parameter in the invoices module.  
Phase
Assigned (20050307)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
85108 11875 CVE-2005-0669 MISC:http://lostmon.blogspot.com/2005/03/phpcoin-posible-sql-injection-comands.html  View
85109 11875 CVE-2005-0669 CONFIRM:http://forums.phpcoin.com/index.php?showtopic=4118  View
85110 11875 CVE-2005-0669 CONFIRM:http://forums.phpcoin.com/index.php?showtopic=4116  View
85111 11875 CVE-2005-0669 CONFIRM:http://forums.phpcoin.com/index.php?showtopic=4101  View
85112 11875 CVE-2005-0669 BID:12686  View
85113 11875 CVE-2005-0669 URL:http://www.securityfocus.com/bid/12686  View
85114 11875 CVE-2005-0669 SECTRACK:1013329  View
85115 11875 CVE-2005-0669 URL:http://securitytracker.com/id?1013329  View
85116 11875 CVE-2005-0669 SECUNIA:14439  View
85117 11875 CVE-2005-0669 URL:http://secunia.com/advisories/14439  View
85118 11875 CVE-2005-0669 XF:phpcoin-id-sql-injection(19571)  View

Related JVN