CVE-2007-4143

no score yetEPSS 4.2%

phpcoupon phpcoupon: no CVSS score yet. EPSS 4.2% chance of exploitation in the next 30 days.

user.php in the Billing Control Panel in phpCoupon allows remote authenticated users to obtain Premium Member status, and possibly acquire free coupons, via a modified URL containing a certain billing parameter and REQ=auth, status=success, and custom=upgrade substrings, possibly related to PayPal transactions.

EPSS: 4.2% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
Published: 2007-08-03
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

phpcoupon:phpcoupon

References

http://securityreason.com/securityalert/2958
http://www.securityfocus.com/archive/1/474936/100/0/threaded
http://www.securityfocus.com/bid/25116
https://exchange.xforce.ibmcloud.com/vulnerabilities/35664
http://securityreason.com/securityalert/2958

Check your stack JSON