couponPHP Multiple Input Validation Vulnerabilities
BID:65918
Info
couponPHP Multiple Input Validation Vulnerabilities
| Bugtraq ID: | 65918 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 28 2014 12:00AM |
| Updated: | Feb 28 2014 12:00AM |
| Credit: | Gjoko Krstic |
| Vulnerable: |
couponPHP couponPHP 1.0 |
| Not Vulnerable: | |
Discussion
couponPHP Multiple Input Validation Vulnerabilities
couponPHP is prone to multiple SQL-injection vulnerabilities, multiple cross-site scripting vulnerabilities and multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input.
Successful exploits could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, execute HTML and script code in the context of the affected site, or control how the site is rendered to the user; other attacks are also possible.
couponPHP 1.0 is vulnerable; other versions may also be affected.
couponPHP is prone to multiple SQL-injection vulnerabilities, multiple cross-site scripting vulnerabilities and multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input.
Successful exploits could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, execute HTML and script code in the context of the affected site, or control how the site is rendered to the user; other attacks are also possible.
couponPHP 1.0 is vulnerable; other versions may also be affected.
References
couponPHP Multiple Input Validation Vulnerabilities
References:
References:
- couponPHP CMS 1.0 Multiple Stored XSS and SQL Injection Vulnerabilities (Zero Science Lab)
- couponPHP Homepage (couponPHP)