4
CVE-2007-4143
- EPSS 4.16%
- Veröffentlicht 03.08.2007 20:17:00
- Zuletzt bearbeitet 16.06.2026 22:43:28
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
user.php in the Billing Control Panel in phpCoupon allows remote authenticated users to obtain Premium Member status, and possibly acquire free coupons, via a modified URL containing a certain billing parameter and REQ=auth, status=success, and custom=upgrade substrings, possibly related to PayPal transactions.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 4.16% | 0.896 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4 | 8 | 2.9 |
AV:N/AC:L/Au:S/C:N/I:P/A:N
|
http://securityreason.com/securityalert/2958
http://www.securityfocus.com/archive/1/474936/100/0/threaded
http://www.securityfocus.com/bid/25116
https://exchange.xforce.ibmcloud.com/vulnerabilities/35664