Back
CVE-2005-4213
SQL injection vulnerability in mod.php in phpCOIN 1.2.2 allows remote attackers to execute arbitrary SQL commands via the phpcoinsessid cookie.
Published: Dec 14, 2005
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (1)
| Vendor | Product | Version |
|---|---|---|
| coinsoft_technologies | phpcoin | 1.2.2 |
GitHub Security Advisory GHSA-g3ff-6f3f-hmmm
SQL injection vulnerability in mod.php in phpCOIN 1.2.2 allows remote attackers to execute...
References (18)
- http://forums.phpcoin.com/index.php?showtopic=5469
- http://rgod.altervista.org/phpcoin122.html Exploit, Vendor Advisory
- http://rgod.altervista.org/phpcoin_122_sql_xpl.html Exploit
- http://secunia.com/advisories/18030 Vendor Advisory
- http://securitytracker.com/id?1015345 Exploit
- http://www.osvdb.org/21725
- http://www.securityfocus.com/archive/1/419382/100/0/threaded
- http://www.securityfocus.com/bid/15830 Exploit
- http://www.vupen.com/english/advisories/2005/2888
- http://forums.phpcoin.com/index.php?showtopic=5469
- http://rgod.altervista.org/phpcoin122.html Exploit, Vendor Advisory
- http://rgod.altervista.org/phpcoin_122_sql_xpl.html Exploit
- http://secunia.com/advisories/18030 Vendor Advisory
- http://securitytracker.com/id?1015345 Exploit
- http://www.osvdb.org/21725
Risk Scores
CVSS Score
7.5 / 10
EPSS Score
3.82%
Top 11% most likely to be exploited
Threat Score
31.1 / 100
Data Sources
NVD
EPSS
GitHub