Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Product

Products as named in CPE, with their records.

Published
2 selected

1 record

Vendor: Enthrallweb Component: Ecoupons Clear all filters
TI-2006-06563 CVE-2006-6820 · GHSA-3qqv-2837-3pvg

myprofile.asp in Enthrallweb eCoupons does not properly validate the MM_recordId…

Priority LOW 20

myprofile.asp in Enthrallweb eCoupons does not properly validate the MM_recordId parameter during profile updates, which allows remote authenticated users to modify certain profile fields of another account by specifying…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01814 Published 2006-12-29 No fix listed