CVE-2005-0670 - CVE House
Back to Database
Status published Medium CVE-2005-0670

Cross-site scripting (XSS) vulnerability in phpCOIN 1.2.0 through 1.2.1b allows...

Vulnerability Description

Cross-site scripting (XSS) vulnerability in phpCOIN 1.2.0 through 1.2.1b allows remote attackers to inject arbitrary web script or HTML via (1) the new parameter to mod.php, (2) the w parameter to mod.php, (3) the e parameter to login.php, (4) the o parameter to login.php, and possibly other scripts.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-0670

Credits & Attribution

No credits recorded in the NVD database.

References

More from coinsoft technologies

View All →
CVE-2006-4425
Multiple PHP remote file inclusion vulnerabilities in phpCOIN 1.2.3 allow...
Medium 5.1
CVE-2006-4424
PHP remote file inclusion vulnerability in coin_includes/constants.php in phpCOIN 1.2.3...
Medium 5.1
CVE-2006-2422
phpCOIN 1.2.3 and earlier stores messages based upon e-mail addresses,...
Medium 5
CVE-2006-1428
Multiple cross-site scripting (XSS) vulnerabilities in phpCOIN 1.2.2 and earlier...
Medium 4.3
CVE-2005-4214
phpCOIN 1.2.2 allows remote attackers to obtain the installation path...
Medium 5

Affected Vendor

coinsoft technologies

View all reports →

Affected Software

phpcoin
Vulnerable Versions:
1.2, 1.2.1, 1.2.1b

Timeline

Official Publish: March 7th, 2005
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.