NVD

Id
56274  
Name
CVE-2007-4143  
Description
user.php in the Billing Control Panel in phpCoupon allows remote authenticated users to obtain Premium Member status, and possibly acquire free coupons, via a modified URL containing a certain billing parameter and REQ=auth, status=success, and custom=upgrade substrings, possibly related to PayPal transactions.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-08-03  
Modified Date
2008-09-05  
Seq
2007-4143  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
286642 56274 CVE-2007-4143 2958  View
286643 56274 CVE-2007-4143 20070728 phpCoupon Vulnerabilities  View
286644 56274 CVE-2007-4143 25116  View
286645 56274 CVE-2007-4143 phpcoupon-payment-security-bypass(35664)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57229 JVNDB-2007-005921 phpCoupon の Billing Control Panel における Premium Member ステイタスを取得される脆弱性 phpCoupon の Billing Control Panel の user.php は、リモート認証されたユーザにより、PayPal トランザクションに関連する処理に不備があるため、Premium Member ステイタスを取得される、およびフリークーポンを取得される脆弱性が存在します。 CVE-2007-4143 27498 CVE-2007-4143 56274 4 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005921.html 2007-08-03 2012-12-20 View