CVE-2014-10034 Multiple SQL injection vulnerabilities in the admin area in couponPHP before 1.2.0 allow remote administrators to execute arbitrary SQL commands via the (1) iDisplayLength or (2) iDisplayStart paramet...
MediumCVSS 6.5
EPSS 2.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple SQL injection vulnerabilities in the admin area in couponPHP before 1.2.0 allow remote administrators to execute arbitrary SQL commands via the (1) iDisplayLength or (2) iDisplayStart parameter to (a) comments_paginate.php or (b) stores_paginate.php in admin/ajax/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| couponphp | <= 1.1.0 | No fix listed |
References
- couponphp.com
- 103895 vdb-entry
- 103896 vdb-entry
- packetstormsecurity.com exploit
- 32037 exploit
- www.zeroscience.mk exploit
- couponphp-commentspaginate-sql-injection(91550) vdb-entry