EUVD-2008-4075

Malware in sbrugna...

Sql injection

SQL injection vulnerability in index.php in PHP Coupon Script 4.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in an addtocart action, a different vector than CVE-2007-2672...

CVE-2008-4090

CVE-2008-4090 : Affects PHP Coupon Script 4.0. The vulnerability is in index.php and allows SQL injection via the id parameter in an addtocart action, enabling remote arbitrary SQL execution.