CVE-2006-1431

The CVE-2006-1431 entry documents a Cross-site scripting (XSS) vulnerability in the fusionZONE couponZONE 4.2 product, specifically in local.cfm. The vulnerability allows remote attackers to inject arbitrary web script or HTML via URL-encoded parameters (1) srchfor and (2) srchby. The NVD descrip...

CVE-2006-1432

The CVE-2006-1432 entry concerns fusionZONE couponZONE 4.2, where remote attackers can disclose server file paths and other sensitive info through manipulated inputs that trigger SQL-based inference. Root cause: improper input handling allowing SQL manipulation leading to information disclosure. ...

CVE-2006-1489

CVE-2006-1489 describes multiple SQL injection vulnerabilities in FusionZONE CouponZONE local.cfm (versions 4.2 and earlier). The flaw allows remote attackers to inject arbitrary SQL commands through the parameters (1) companyid, (2) scat, and (3) coid. The vulnerability can impact confidentialit...