CVE-2016-4837

Critical

Published: 01/08/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

SQL injection vulnerability in the Seed Coupon plugin before version 1.6 for EC-CUBE allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Risk Assessment

Attackers may exploit this vulnerability to gain unauthorized access to the database, potentially leading to data theft or system compromise.

Recommendation

It is recommended to update the Seed Coupon plugin to version 1.6 or later to mitigate the risk associated with this vulnerability.

Original NVD description (English source)

SQL injection vulnerability in the Seed Coupon plugin before 1.6 for EC-CUBE allows remote attackers to execute arbitrary SQL commands via unspecified vectors.