CVE-2007-2672

EPSS 2.5%

SQL injection vulnerability in index.php in PHP Coupon Script 3.0 allows remote attackers to execute arbitrary SQL commands via the bus parameter in a viewbus page.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/3839unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/35590 http://secunia.com/advisories/25145 https://exchange.xforce.ibmcloud.com/vulnerabilities/34045 https://www.exploit-db.com/exploits/3839 http://www.securityfocus.com/bid/23799 http://www.vupen.com/english/advisories/2007/1653