Design/Logic Flaw

2006-03-2822:02:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.2%

JSON

fusionZONE couponZONE 4.2 allows remote attackers to obtain the full path of the web server, and other sensitive information, via invalid values, as demonstrated using manipulations associated with SQL.

CPENameOperatorVersion
couponzoneeq4.2

CPE	Name	Operator	Version
	couponzone	eq	4.2

References

exchange.xforce.ibmcloud.com/vulnerabilities/25486

pridels0.blogspot.com/2006/03/couponzone-v42-multiple-vuln.html