CVE-2007-4143: Phpcoupon

Medium severity, CVSS 4.0. EPSS: 4.2% chance of exploitation in the next 30 days.

user.php in the Billing Control Panel in phpCoupon allows remote authenticated users to obtain Premium Member status, and possibly acquire free coupons, via a modified URL containing a certain billing parameter and REQ=auth, status=success, and custom=upgrade substrings, possibly related to PayPal transactions.

Affected products

• Phpcoupon Phpcoupon: any version

Published 2007-08-03. Last modified 2026-06-16.