Multiple SQL injection vulnerabilities in the admin area in couponPHP before 1.2.0 allow remote administrators to execute arbitrary SQL commands via the (1) iDisplayLength or (2) iDisplayStart parameter to (a) comments_paginate.php or (b) stores_paginate.php in admin/ajax/.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2015-01-13T15:00:00
Updated: 2017-09-07T15:57:01
Reserved: 2015-01-13T00:00:00
Link: CVE-2014-10034
JSON object: View
NVD Information
Status : Modified
Published: 2015-01-13T15:59:43.490
Modified: 2017-09-08T01:29:03.807
Link: CVE-2014-10034
JSON object: View
Redhat Information
No data.
CWE