Every CVE Search/ Get API key

CVE-2006-1432

fusionZONE couponZONE 4.2 allows remote attackers to obtain the full path of the web server, and...

5.0 Medium

fusionZONE couponZONE 4.2 allows remote attackers to obtain the full path of the web server, and other sensitive information, via invalid values, as demonstrated using manipulations associated with SQL.

Exploit likelihood

1.18%Up 0.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

fusionZONE couponZONE 4.2 allows remote attackers to obtain the full path of the web server, and other sensitive information, via invalid values, as demonstrated using manipulations associated with SQL.

Record
CVE-2006-1432
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Updated
2026-11-02
CVE List No score

fusionZONE couponZONE 4.2 allows remote attackers to obtain the full path of the web server, and other sensitive information, via invalid values, as demonstrated using manipulations associated with SQL.

Record
CVE-2006-1432
Updated
2026-11-02
EUVDEUVD-2006-1436 No score

fusionZONE couponZONE 4.2 allows remote attackers to obtain the full path of the web server, and other sensitive information, via invalid values, as demonstrated using manipulations associated with SQL.

Record
EUVD-2006-1436
Updated
2026-11-03
GitHub AdvisoriesGHSA-fj79-mvfm-9x63 No score

fusionZONE couponZONE 4.2 allows remote attackers to obtain the full path of the web server, and...

fusionZONE couponZONE 4.2 allows remote attackers to obtain the full path of the web server, and other sensitive information, via invalid values, as demonstrated using manipulations associated with SQL.

Record
GHSA-fj79-mvfm-9x63
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-1432 is a medium vulnerability (CVSS 5.0) in Fusionzone Couponzone, published March 28, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.18%, the 67th percentile. No source names a fixed version.

References

MoveEnter Open