CVE-2014-10034

Multiple SQL injection vulnerabilities in the admin area in couponPHP before 1.2.0 allow remote...

6.5 MediumPublic exploit

CVE-2014-10034 is a medium vulnerability (CVSS 6.5) in Couponphp, published January 13, 2015. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.96%, the 80th percentile. No source names a fixed version.

Multiple SQL injection vulnerabilities in the admin area in couponPHP before 1.2.0 allow remote administrators to execute arbitrary SQL commands via the (1) iDisplayLength or (2) iDisplayStart parameter to (a) comments_paginate.php or (b) stores_paginate.php in admin/ajax/.

Exploit likelihood

1.96%Up 0.9 points since Feb 4, 2022

What each source reports

NVD Score used 6.5

Record: CVE-2014-10034
CVSS 2.0: 6.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:P
Weakness: CWE-89
Updated: 2026-11-02

CVE List No score

Record: CVE-2014-10034
Updated: 2026-11-02

EUVDEUVD-2014-1106 No score

Record: EUVD-2014-1106
Updated: 2026-11-03

GitHub AdvisoriesGHSA-wpmg-jhg2-45g9 No score

Multiple SQL injection vulnerabilities in the admin area in couponPHP before 1.2.0 allow remote...

Record: GHSA-wpmg-jhg2-45g9
Weakness: CWE-89
Updated: 2026-11-02

Affected products

couponphp

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	couponPHP CMS 1.0 - Multiple Persistent Cross-Site Scripting / SQL Injections	2014-03-03

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, NVD

Exploit likelihood

What each source reports

Affected products

Public exploits

History

References