https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2006-1489.htmlhttps://patchthecve.com/cve/CVE-2006-1489.htmlTue, 16 Jun 2026 22:22:46 +0000HIGH 7.5: Multiple SQL injection vulnerabilities in FusionZONE CouponZONE local.cfm in 4.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) companyid, (2) scat, and (3) coid parameters.https://patchthecve.com/cve/CVE-2006-1432.htmlhttps://patchthecve.com/cve/CVE-2006-1432.htmlTue, 16 Jun 2026 22:22:39 +0000MEDIUM 5.0: fusionZONE couponZONE 4.2 allows remote attackers to obtain the full path of the web server, and other sensitive information, via invalid values, as demonstrated using manipulations associated with SQL.https://patchthecve.com/cve/CVE-2006-1431.htmlhttps://patchthecve.com/cve/CVE-2006-1431.htmlTue, 16 Jun 2026 22:22:39 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in local.cfm in fusionZONE couponZONE 4.2 allows remote attackers to inject arbitrary web script or HTML via URL-encoded (1) srchfor and (2) srchby parameters.