TI-2010-04577 CVE-2010-4854 · GHSA-545w-p7xc-6h8jSQL injection vulnerability in ajax/coupon.php in Zuitu 1.6, when magic_quotes_gpc is…Priority LOW 32SQL injection vulnerability in ajax/coupon.php in Zuitu 1.6, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a consume action.CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.01007 · Published 2011-10-05 · No fix listed CWE-89