CVE-2016-4837: SQL Injection
Published Aug 1, 2016
·Updated
SQL injection vulnerability in the Seed Coupon plugin before 1.6 for EC-CUBE allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected Software
1 affected component
EC-CUBE Discount Coupon Ec-cube<=1.5
Event History
Aug 1, 2016
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-4837?
CVE-2016-4837 has a medium severity rating due to its potential for remote SQL injection attacks.
2
How do I fix CVE-2016-4837?
To fix CVE-2016-4837, upgrade the Seed Coupon plugin to version 1.6 or later.
3
What systems are affected by CVE-2016-4837?
CVE-2016-4837 affects versions of the Seed Coupon plugin for EC-CUBE prior to 1.6.
4
What type of vulnerability is CVE-2016-4837?
CVE-2016-4837 is an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands.
5
How can attackers exploit CVE-2016-4837?
Attackers can exploit CVE-2016-4837 through unspecified vectors that allow them to submit malicious SQL commands to the database.