CVE-2005-4211

CVE-2005-4211 describes a remote file inclusion vulnerability in phpCOIN 1.2.2, specifically within the coin_includes/db.php file. Attackers can exploit this by injecting a malicious URL into the $_CCFG[_PKG_PATH_DBSE] variable, leading to arbitrary PHP code execution on the server. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low complexity, and potential for complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog, an ExploitDB entry (EDB-26787) confirms the existence of public exploit code, though there is no evidence of active exploitation or significant community discussion.