CVE-2005-0670 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2005-0670
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2005-0670

Description: Cross-site scripting (XSS) vulnerability in phpCOIN 1.2.0 through 1.2.1b allows remote attackers to inject arbitrary web script or HTML via (1) the new parameter to mod.php, (2) the w parameter to mod.php, (3) the e parameter to login.php, (4) the o parameter to login.php, and possibly other scripts.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/19572 ST 1013329 SAID Secunia Advisory: SA14439 MISC http://lostmon.blogspot.com/2005/03/phpcoin-posible-sql-injection-comands.html CONFIRM http://forums.phpcoin.com/index.php?showtopic=4101 http://forums.phpcoin.com/index.php?showtopic=4118 http://forums.phpcoin.com/index.php?showtopic=4116 BID 12686

Return to the previous page.