Coinsoft Technologies Phpcoin — known CVE vulnerabilities

Every CVE whose affected-product data names Coinsoft Technologies Phpcoin, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (15)

• CVE-2005-0669 — CVSS 7.5 (high): Multiple SQL injection vulnerabilities in mod.php for phpCOIN 1.2.0 through 1.2.1b allow remote attackers to execute arbitrary SQL commands…
• CVE-2005-0932 — CVSS 7.5 (high): Multiple SQL injection vulnerabilities in phpCOIN 1.2.1b and earlier allow remote attackers to execute arbitrary SQL commands (1) via the…
• CVE-2005-0946 — CVSS 7.5 (high): SQL injection vulnerability in phpCoin 1.2.1b and earlier allows remote attackers to execute arbitrary SQL commands via the (1)…
• CVE-2005-0947 — CVSS 7.5 (high): Directory traversal vulnerability in auxpage.php in phpCoin 1.2.1b and earlier allows remote attackers to read and execute arbitrary files…
• CVE-2005-1384 — CVSS 7.5 (high): Multiple SQL injection vulnerabilities in phpCoin 1.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) search…
• CVE-2005-4211 — CVSS 7.5 (high): PHP remote file inclusion vulnerability in coin_includes/db.php in phpCOIN 1.2.2 allows remote attackers to execute arbitrary PHP code via…
• CVE-2005-4213 — CVSS 7.5 (high): SQL injection vulnerability in mod.php in phpCOIN 1.2.2 allows remote attackers to execute arbitrary SQL commands via the phpcoinsessid…
• CVE-2006-4424 — CVSS 5.1 (medium): PHP remote file inclusion vulnerability in coin_includes/constants.php in phpCOIN 1.2.3 allows remote attackers to execute arbitrary PHP…
• CVE-2006-4425 — CVSS 5.1 (medium): Multiple PHP remote file inclusion vulnerabilities in phpCOIN 1.2.3 allow remote attackers to execute arbitrary PHP code via the…
• CVE-2005-0933 — CVSS 5.0 (medium): Directory traversal vulnerability in auxpage.php for phpCOIN 1.2.1b and earlier allows remote attackers to read arbitrary files via the…
• CVE-2005-4214 — CVSS 5.0 (medium): phpCOIN 1.2.2 allows remote attackers to obtain the installation path via a direct request to config.php, which leaks the path in an error…
• CVE-2006-2422 — CVSS 5.0 (medium): phpCOIN 1.2.3 and earlier stores messages based upon e-mail addresses, which allows remote authenticated users to read messages for other…
• CVE-2005-4212 — CVSS 5.0 (medium): Directory traversal vulnerability in coin_includes/db.php in phpCOIN 1.2.2 allows remote attackers to read arbitrary local files via ".."…
• CVE-2006-1428 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in phpCOIN 1.2.2 and earlier allow remote attackers to inject arbitrary web script or…
• CVE-2005-0670 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in phpCOIN 1.2.0 through 1.2.1b allows remote attackers to inject arbitrary web script or HTML via…