Multiple PHP remote file inclusion vulnerabilities in phpCOIN 1.2.3 allow remote attackers to execute arbitrary PHP code via the _CCFG[_PKG_PATH_INCL] parameter in coin_includes scripts including (1) api.php, (2) common.php, (3) core.php, (4) custom.php, (5) db.php, (6) redirect.php or (7) session_set.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information.
References
Configurations
History
No history.
Information
Published : 2006-08-29 00:04
Updated : 2024-02-28 10:42
NVD link : CVE-2006-4425
Mitre link : CVE-2006-4425
CVE.ORG link : CVE-2006-4425
JSON object : View
Products Affected
coinsoft_technologies
- phpcoin
CWE