Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Couponphp Component: Couponphp Clear all filters
TI-2014-08197 CVE-2014-10035 · GHSA-qh2h-gj3j-26h3

Multiple cross-site scripting (XSS) vulnerabilities in the admin area in couponPHP before…

Priority LOW 26

Multiple cross-site scripting (XSS) vulnerabilities in the admin area in couponPHP before 1.2.0 allow remote administrators to inject arbitrary web script or HTML via the (1) sEcho parameter to comments_paginate.php or (…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03496 Published 2015-01-13 No fix listed CWE-79
TI-2014-08196 CVE-2014-10034 · GHSA-wpmg-jhg2-45g9

Multiple SQL injection vulnerabilities in the admin area in couponPHP before 1.2.0 allow…

Priority LOW 33

Multiple SQL injection vulnerabilities in the admin area in couponPHP before 1.2.0 allow remote administrators to execute arbitrary SQL commands via the (1) iDisplayLength or (2) iDisplayStart parameter to (a) comments_p…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01961 Published 2015-01-13 No fix listed CWE-89