Mailform Pro CGI Sensitive Information Disclosure Vulnerability in Coupon Feature

A vulnerability exists in Mailform Pro CGI versions prior to 4.3.4, provided by SYNCK GRAPHICA. This issue arises from the generation of error messages that inadvertently disclose sensitive information, specifically coupon codes. The vulnerability is present only in products that utilize the coupon feature.

Impact

Exploitation of this vulnerability allows remote unauthenticated attackers to obtain coupon codes.

Remediation

Users are advised to update Mailform Pro CGI to version 4.3.4 or later. For those using the coupon feature, the updated files can be downloaded from the Mailform Pro download page.