CVEvulnerability
CVE-2014-10034
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-01-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in the admin area in couponPHP before 1.2.0 allow remote administrators to execute arbitrary SQL commands via the (1) iDisplayLength or (2) iDisplayStart parameter to (a) comments_paginate.php or (b) stores_paginate.php in admin/ajax/.
Affected configurations
• couponphp couponphp (<= 1.1.0)
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://couponphp.com/changelog couponphp.com
- http://osvdb.org/show/osvdb/103895 osvdb.org
- http://osvdb.org/show/osvdb/103896 osvdb.org
- http://packetstormsecurity.com/files/125480 Exploit
- http://www.exploit-db.com/exploits/32037 Exploit
- http://www.zeroscience.mk/en/vulnerabilities/ZSL-2014-5170.php Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/91550 exchange.xforce.ibmcloud.com
- http://couponphp.com/changelog couponphp.com
- http://osvdb.org/show/osvdb/103895 osvdb.org
- http://osvdb.org/show/osvdb/103896 osvdb.org
- http://packetstormsecurity.com/files/125480 Exploit
- http://www.exploit-db.com/exploits/32037 Exploit
- http://www.zeroscience.mk/en/vulnerabilities/ZSL-2014-5170.php Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/91550 exchange.xforce.ibmcloud.com