Multiple SQL injection vulnerabilities in phpCOIN 1.2.1b and earlier allow remote attackers to execute arbitrary SQL commands (1) via the search engine, (2) the username or email fields in the "forgotten password" feature, or (3) the domain name in a package order.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2005-03-29T05:00:00

Updated: 2024-08-07T21:28:29.062Z

Reserved: 2005-03-30T00:00:00

Link: CVE-2005-0932

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2005-05-02T04:00:00.000

Modified: 2011-03-08T02:20:49.797

Link: CVE-2005-0932

cve-icon Redhat

No data.