Phpcoin

Vendor:

First CVE: Mar 29, 2005 · Active for 21 years

16

Total CVEs

More Total CVEs than 92% of tracked products

8.0

Avg CVEs / Year

Higher CVE frequency than 94% of tracked products

6.2

Avg CVSS

Higher Avg CVSS than 24% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Phpcoin over time

Volume of CVEsAvg CVSS Base Score

First CVE

Mar 29, 2005

21 years ago

Most Recent CVE

Aug 29, 2006

7,269 days ago

CVE Severity & Scoring

Phpcoin16 CVEs

50%

All CVEs352,231 CVEs

45%

40%

11%

MediumHigh

Attack Vector

Local0 (0.0%)

Network0 (0.0%)

Unknown16 (100.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low0 (0.0%)

High0 (0.0%)

Unknown16 (100.0%)

User Interaction

None0 (0.0%)

Unknown16 (100.0%)

Required0 (0.0%)

Privileges Required

Low0 (0.0%)

High0 (0.0%)

None0 (0.0%)

Unknown16 (100.0%)

Top CVEs

Signals from CVEs in this product scope (16 CVEs).

16 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2005-4211HIGH PHP remote file inclusion vulnerability in coin_includes/db.php in phpCOIN 1.2.2 allows remote attackers to execute arbitrary PHP code via a URL in the $_CCFG[_PKG_PATH_DBSE] varia	Dec 14, 2005	7.5	32	NO	YES
CVE-2005-4213HIGH SQL injection vulnerability in mod.php in phpCOIN 1.2.2 allows remote attackers to execute arbitrary SQL commands via the phpcoinsessid cookie.	Dec 14, 2005	7.5	29	NO	YES
CVE-2005-1384HIGH Multiple SQL injection vulnerabilities in phpCoin 1.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) search parameter to index.php, (2) phpcoinsessid parame	May 3, 2005	7.5	29	NO	YES
CVE-2006-4424MEDIUM PHP remote file inclusion vulnerability in coin_includes/constants.php in phpCOIN 1.2.3 allows remote attackers to execute arbitrary PHP code via the _CCFG[_PKG_PATH_INCL] paramete	Aug 29, 2006	5.1	25	NO	YES
CVE-2005-4212MEDIUM Directory traversal vulnerability in coin_includes/db.php in phpCOIN 1.2.2 allows remote attackers to read arbitrary local files via ".." (dot dot) sequences in the $_CCFG[_PKG_PAT	Dec 14, 2005	5.0	25	NO	YES
CVE-2006-4425MEDIUM Multiple PHP remote file inclusion vulnerabilities in phpCOIN 1.2.3 allow remote attackers to execute arbitrary PHP code via the _CCFG[_PKG_PATH_INCL] parameter in coin_includes sc	Aug 29, 2006	5.1	24	NO	YES
CVE-2005-0670MEDIUM Cross-site scripting (XSS) vulnerability in phpCOIN 1.2.0 through 1.2.1b allows remote attackers to inject arbitrary web script or HTML via (1) the new parameter to mod.php, (2) th	May 2, 2005	4.3	22	NO	YES
CVE-2006-1428MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in phpCOIN 1.2.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the fs parameter to (1) mod.php o	Mar 28, 2006	4.3	21	NO	YES
CVE-2005-4447HIGH SQL injection vulnerability in articles\articles_funcs.php in phpCOIN 1.2.2 allows remote attackers to modify SQL syntax and possibly execute SQL in limited circumstances via the r	Dec 21, 2005	7.5	19	NO	NO
CVE-2005-0669HIGH Multiple SQL injection vulnerabilities in mod.php for phpCOIN 1.2.0 through 1.2.1b allow remote attackers to execute arbitrary SQL commands via the (1) the faq_id in the faq mod, (	May 2, 2005	7.5	19	NO	NO

View all 16 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (16 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

8 CVEs

50.0% of CVEs· 91st percentile

Social Chatter

Signals from CVEs in this product scope (16 CVEs).

Media Mentions

Signals from CVEs in this product scope (16 CVEs).

Top CNAs Publishing CVEs For Phpcoin

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	Exploits
1.2.3	2	5.1	5.8%	2
1.2.2	6	5.7	4.4%	4
1.2.1b	8	6.5	2.0%	2
1.2.1	9	6.2	2.0%	3
1.2.0	1	4.3	2.0%	1
1.2	7	6.7	2.0%	2
1.1.1	1	4.3	2.0%	1
1.1.0	1	4.3	2.0%	1