CVE-2005-1384 in phpCoin
Summary
by MITRE
Multiple SQL injection vulnerabilities in phpCoin 1.2.2 allow remote attackers to execute arbitrary SQL commands via the (1) search parameter to index.php, (2) phpcoinsessid parameter to login.php, (3) id, (4) dtopic_id, or (5) dcat_id to mod.php.
Be aware that VulDB is the high quality source for vulnerability data.
Analysis
by VulDB Data Team • 09/29/2025
The vulnerability identified as CVE-2005-1384 represents a critical security flaw in phpCoin version 1.2.2, a content management system designed for web-based applications. This vulnerability manifests as multiple SQL injection weaknesses that collectively undermine the application's database security mechanisms. The affected parameters span across several key application endpoints including the search functionality in index.php, session management in login.php, and various database identifier parameters in mod.php. These injection points create pathways for malicious actors to manipulate the underlying database queries and potentially gain unauthorized access to sensitive information.
The technical implementation of this vulnerability stems from inadequate input validation and sanitization within the phpCoin application code. When user-supplied data is directly incorporated into SQL queries without proper escaping or parameterization, attackers can craft malicious input that alters the intended query execution flow. The search parameter in index.php serves as the primary attack vector for the first vulnerability, allowing remote attackers to inject SQL commands that bypass authentication mechanisms or extract confidential data. Similarly, the phpcoinsessid parameter in login.php presents a second attack surface where session identifiers can be manipulated to compromise user authentication processes.
The operational impact of this vulnerability extends beyond simple data extraction to encompass full database compromise capabilities. Attackers exploiting these SQL injection flaws can execute arbitrary SQL commands against the backend database, potentially leading to complete system takeover, data corruption, or unauthorized data modification. The presence of multiple injection points increases the attack surface and provides attackers with several potential entry methods, making the vulnerability particularly dangerous for organizations relying on phpCoin for their web applications. The exploitation of these vulnerabilities aligns with attack techniques documented in the attack pattern taxonomy under the MITRE ATT&CK framework, specifically targeting the SQL injection category and database access patterns.
The vulnerability's severity is further amplified by the fact that it affects core application functionality including user authentication, search capabilities, and content management modules. The id, dtopic_id, and dcat_id parameters in mod.php represent additional attack vectors that could allow attackers to manipulate database records, potentially leading to content tampering or privilege escalation. This vulnerability directly maps to CWE-89, which defines SQL injection as the insertion of malicious SQL code into input fields to manipulate database queries, and the broader category of CWE-20, which encompasses input validation weaknesses in software applications. Organizations utilizing phpCoin 1.2.2 should immediately implement mitigation strategies including input validation, parameterized queries, and proper session management practices to address these critical security weaknesses.