604 matches found
in microweber/microweber
Description I create a coupon only for one user and also is one-time use coupon. then create two user and both of them can use the coupon but only one of them should able to use the coupon...
coupon-use.com Cross Site Scripting vulnerability OBB-2154335
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
coupon-bonus.com Cross Site Scripting vulnerability OBB-2154330
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
WordPress Coupon Affiliates plugin <= 4.11.0.1 - Reflected Cross-Site Scripting (XSS) vulnerability
Reflected Cross-Site Scripting XSS vulnerability discovered by WPScanTeam in WordPress Coupon Affiliates plugin versions = 4.11.0.1. Solution Update the WordPress Coupon Affiliates plugin to the latest available version at least 4.11.0.2...
Android Malware ‘FlyTrap’ Hijacks Facebook Accounts
Researchers have uncovered a new Android trojan, dubbed FlyTrap, that’s spread to more than 10,000 victims via rigged apps on third-party app stores, sideloaded apps and hijacked Facebook accounts. In a report posted on Monday, Zimperium’s zLabs mobile threat research teams wrote that FlyTrap has...
CVE-2021-31929
Annex Cloud Loyalty Experience Platform 2021.1.0.1 allows any authenticated attacker to modify loyalty campaigns and settings, such as fraud prevention, coupon groups, email templates, or referrals...
Code injection
Annex Cloud Loyalty Experience Platform 2021.1.0.1 allows any authenticated attacker to modify loyalty campaigns and settings, such as fraud prevention, coupon groups, email templates, or referrals...
CVE-2021-31929
Annex Cloud Loyalty Experience Platform 2021.1.0.1 allows any authenticated attacker to modify loyalty campaigns and settings, such as fraud prevention, coupon groups, email templates, or referrals...
CVE-2021-31929
The vulnerability CVE-2021-31929 affects Annex Cloud’s Loyalty Experience Platform before version 2021.1.0.1. An authenticated attacker can modify loyalty campaigns and settings (including fraud prevention, coupon groups, email templates, and referrals), indicating insufficient authorization cont...
LifterLMS < 4.21.1 - Reflected Cross-Site Scripting (XSS) via Coupon Code in Checkout
The plugin did not properly sanitise the coupon code during checkout before outputting in back the error message in the page, leading to a reflected Cross-Site Scripting issue...
TP-COUPON suffers from SQL injection vulnerability (CNVD-2021-23514)
TP-COUPON is a free and open source coupon system developed using the Thinkphp framework. TP-COUPON suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...
TP-COUPON suffers from SQL injection vulnerability (CNVD-2021-22937)
TP-COUPON is a free and open source coupon system developed using the Thinkphp framework. TP-COUPON suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...
TP-COUPON suffers from SQL injection vulnerability (CNVD-2021-22938)
TP-COUPON is a free and open source coupon system developed using the Thinkphp framework. TP-COUPON suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...
TP-COUPON suffers from SQL injection vulnerability (CNVD-2021-23515)
TP-COUPON is a free and open source coupon system developed using the Thinkphp framework. TP-COUPON suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...
TP-COUPON suffers from SQL injection vulnerability (CNVD-2021-23516)
TP-COUPON is a free and open source coupon system developed using the Thinkphp framework. TP-COUPON suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...
TP-COUPON suffers from SQL injection vulnerability (CNVD-2021-22941)
TP-COUPON is a free and open source coupon system developed using the Thinkphp framework. TP-COUPON suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...
TP-COUPON suffers from SQL injection vulnerability (CNVD-2021-22935)
TP-COUPON is a free and open source coupon system developed using the Thinkphp framework. TP-COUPON suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...
TP-COUPON suffers from SQL injection vulnerability (CNVD-2021-21531)
TP-COUPON is a free and open source coupon system developed using the Thinkphp framework. TP-COUPON suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...
SQL Injection Vulnerability in TP-COUPON
TP-COUPON is a free and open source coupon system developed using the Thinkphp framework. TP-COUPON suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...
nopCommerce Cross-Site Scripting Vulnerability (CNVD-2021-14161)
nopCommerce is an open source e-commerce shopping cart software. A reflective cross-site scripting vulnerability exists in the Discount Coupon component in nopCommerce 4.30. An attacker can exploit this vulnerability to inject arbitrary web script or HTML via the...