CVE-2006-1489

CVE-2006-1489 describes multiple SQL injection vulnerabilities in FusionZONE CouponZONE local.cfm (versions 4.2 and earlier). The flaw allows remote attackers to inject arbitrary SQL commands through the parameters (1) companyid, (2) scat, and (3) coid. The vulnerability can impact confidentialit...