CVE-2006-1489

FusionZONE CouponZONE <4.2 - SQL Injection

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-1489. PoCs published by r0t.

AI-analyzed exploit summary The provided text describes SQL injection vulnerabilities in couponZONE version 4.2, detailing multiple attack vectors via unsanitized input parameters. It includes example URLs demonstrating the injection points but lacks executable exploit code.

Description

Multiple SQL injection vulnerabilities in FusionZONE CouponZONE local.cfm in 4.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) companyid, (2) scat, and (3) coid parameters.

Exploits (1)

exploitdb WRITEUP VERIFIED
by r0t · textwebappscfm
https://www.exploit-db.com/exploits/27491

The provided text describes SQL injection vulnerabilities in couponZONE version 4.2, detailing multiple attack vectors via unsanitized input parameters. It includes example URLs demonstrating the injection points but lacks executable exploit code.

Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Theoretical
Target: couponZONE 4.2
No auth needed
Prerequisites: Access to the vulnerable application URL
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Exploit vdb-entry x_refsource_osvdb
http://www.osvdb.org/24179
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/17274
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/25576

Scores

EPSS 0.0114
EPSS Percentile 62.3%

Details

Status published
Products (1)
fusionzone/couponzone 4.2
Published Mar 29, 2006
Tracked Since Feb 18, 2026