Lucene search
HistorySep 15, 2008 - 5:12 p.m.
CVE-2008-4090
cve-2008-4090
sql injection
php coupon script 4.0
remote attackers
addtocart action
8.8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
36.9%
SQL injection vulnerability in index.php in PHP Coupon Script 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in an addtocart action, a different vector than CVE-2007-2672.
| CPE | Name | Operator | Version |
|---|---|---|---|
| couponscript:coupon_script | couponscript coupon script | eq | 4.0 |
Related
prion
prion
Sql injection
2008-09-15 17:12:00
Sql injection
2007-05-14 23:19:00
cve
cve
CVE-2007-2672
2007-05-14 23:19:00
8.8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
36.9%
Related for CVE-2008-4090