Couponphp

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2014-10035 MEDIUM POC This Month

Multiple cross-site scripting (XSS) vulnerabilities in the admin area in couponPHP before 1.2.0 allow remote administrators to inject arbitrary web script or HTML via the (1) sEcho parameter to. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

XSS PHP Couponphp

NVD Exploit-DB

CVSS 2.0

4.3

EPSS

9.8%

CVE-2014-10034 MEDIUM POC This Month

Multiple SQL injection vulnerabilities in the admin area in couponPHP before 1.2.0 allow remote administrators to execute arbitrary SQL commands via the (1) iDisplayLength or (2) iDisplayStart. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Couponphp

NVD Exploit-DB

CVSS 2.0

6.5

EPSS

1.9%

CVE-2014-10035

EPSS 10% CVSS 4.3

MEDIUM POC This Month

XSS PHP Couponphp

NVD Exploit-DB

CVE-2014-10034

EPSS 2% CVSS 6.5

MEDIUM POC This Month

PHP SQLi Couponphp

NVD Exploit-DB