couponPHP CMS 1.0跨站脚本漏洞

couponPHP是优惠劵和交易网站的内容管理系统。 couponPHP CMS 1.0版本没有正确过滤 /admin/ajax/commentspaginate.php 或 /admin/ajax/storespaginate.php的 "sEcho" GET 参数值，在实现上存在多个跨站脚本漏洞，可导致在用户浏览器会话中执行任意HTML和脚本代码。 0 couponPHP couponPHP 1.0 厂商补丁： couponPHP --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.couponphp.com...

couponPHP CMS 1.0 - Multiple Stored XSS and SQL Injection Vulnerabilities

couponPHP is vulnerable to multiple Stored XSS and SQL Injection issues. Input passed via the parameters 'iDisplayLength' and 'iDisplayStart' in 'commentspaginate.php' and 'storespaginate.php' scripts are not properly sanitised before being returned to the user or used in SQL queries. This can be...

couponPHP CMS 1.0 - Multiple Persistent Cross-Site Scripting / SQL Injections

couponPHP CMS 1.0 Multiple Stored XSS and SQL Injection Vulnerabilities Vendor: couponPHP Product web page: http://www.couponphp.com Affected version: 1.0 Summary: couponPHP is a revolutionary content management system for running Coupon and Deal websites. It is feature rich, powerful, beautifull...

couponPHP CMS 1.0 - Multiple Persistent Cross-Site Scripting SQL Injections

couponPHP CMS 1.0 - Multiple Persistent Cross-Site Scripting SQL Injections couponPHP CMS 1.0 Multiple Stored XSS and SQL Injection Vulnerabilities Vendor: couponPHP Product web page: http://www.couponphp.com Affected version: 1.0 Summary: couponPHP is a revolutionary content management system fo...

couponPHP CMS 1.0 Cross Site Scripting / SQL Injection

couponPHP CMS version 1.0 suffers from cross site scripting and remote SQL injection vulnerabilities. couponPHP CMS 1.0 Multiple Stored XSS and SQL Injection Vulnerabilities Vendor: couponPHP Product web page: http://www.couponphp.com Affected version: 1.0 Summary: couponPHP is a revolutionary...

couponPHP CMS 1.0 Multiple Stored XSS and SQL Injection Vulnerabilities

Summary couponPHP is a revolutionary content management system for running Coupon and Deal websites. It is feature rich, powerful, beautifully designed and fully automatic. Description couponPHP is vulnerable to multiple Stored XSS and SQL Injection issues. Input passed via the parameters...

couponPHP CMS 1.0 Cross Site Scripting / SQL Injection

couponPHP CMS 1.0 Multiple Stored XSS and SQL Injection Vulnerabilities Vendor: couponPHP Product web page: http://www.couponphp.com Affected version: 1.0 Summary: couponPHP is a revolutionary content management system for running Coupon and Deal websites. It is feature rich, powerful,...