CVE-2006-4424

no score yetEPSS 7.6%

PHP remote file inclusion vulnerability in coin_includes/constants.php in phpCOIN 1.2.3 allows remote attackers to execute arbitrary PHP code via the _CCFG[_PKG_PATH_INCL] parameter.

EPSS: 7.6% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
Published: 2006-08-29
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

coinsoft_technologies:phpcoin

References

http://secunia.com/advisories/21624
http://www.osvdb.org/28218
http://www.securityfocus.com/bid/19706
http://www.vupen.com/english/advisories/2006/3385
https://exchange.xforce.ibmcloud.com/vulnerabilities/28572

Check your stack JSON