ID de Prueba:	1.3.6.1.4.1.25623.1.0.800736
Categoría:	Web application abuses
Título:	phpCOIN 'mod' Parameter Local File Include Vulnerability
Resumen:	phpCOIN is prone to local file include vulnerability.
Descripción:	Summary: phpCOIN is prone to local file include vulnerability. Vulnerability Insight: The flaw exists in 'mod.php' as it fails to properly sanitize user-supplied data, which allows remote attacker to include arbitrary files. Vulnerability Impact: Successful exploitation will allow attacker to obtain sensitive information and attacker can include arbitrary files. Affected Software/OS: phpCOIN version 1.2.1 and prior Solution: Upgrade to phpCOIN version 1.6.5 or higher CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2010-0953 BugTraq ID: 38576 http://www.securityfocus.com/bid/38576 http://www.exploit-db.com/exploits/11641 XForce ISS Database: phpcoin-mod-file-include(56721) https://exchange.xforce.ibmcloud.com/vulnerabilities/56721
Copyright	Copyright (C) 2010 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.