604 matches found
CVE-2021-26916
In nopCommerce 4.30, a Reflected XSS issue in the Discount Coupon component allows remote attackers to inject arbitrary web script or HTML through the Filters/CheckDiscountCouponAttribute.cs discountcode parameter...
CVE-2021-26916
CVE-2021-26916 in nopCommerce 4.30 is a reflected cross-site scripting vulnerability in the Discount Coupon component. The flaw allows an attacker to inject arbitrary web script or HTML via the DiscountCode parameter located in Filters/CheckDiscountCouponAttribute.cs. The description across multi...
CVE-2021-26916
In nopCommerce 4.30, a Reflected XSS issue in the Discount Coupon component allows remote attackers to inject arbitrary web script or HTML through the Filters/CheckDiscountCouponAttribute.cs discountcode parameter...
nopCommerce 跨站脚本漏洞
nopCommerce is an open source e-commerce shopping cart software. A reflective cross-site scripting vulnerability exists in the Discount Coupon component in nopCommerce 4.30. An attacker can exploit this vulnerability to inject arbitrary web script or HTML via the...
VulnCheck KEV: CVE-2015-1000013
Remote file upload vulnerability in wordpress plugin csv2wpec-coupon v1.1...
WordPress Coupon Creator plugin <= 3.1 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability found by Jerome Bruandet NinTechNet in WordPress Coupon Creator plugin versions = 3.1. Solution Update the WordPress Coupon Creator plugin to the latest available version at least 3.1.1...
Ltd. Ebuycms has a flaw in the logic of unification vulnerability
Ebuycms is an e-commerce mall platform system developed for a wide range of small and medium-sized enterprises. Ltd. Ebuycms has a statistical logic flaw vulnerability that can be exploited by attackers to repeatedly obtain coupons...
CVE-2020-10985
Gambio GX before 4.0.1.0 allows XSS in admin/couponadmin.php...
Design/Logic Flaw
Gambio GX before 4.0.1.0 allows XSS in admin/couponadmin.php...
CVE-2020-10985
Gambio GX before 4.0.1.0 allows XSS in admin/couponadmin.php...
SQL Injection Vulnerability in the Lede Tongcheng Coupon System of Ziou Network Technology Service Center in Dingtao District, Heze City (CNVD-2020-32563)
LOTUS Coupon System is a WeChat-based e-coupon operation and distribution system for merchants in the same city. There is a SQL injection vulnerability in the LeDe Same City Coupon System of Ziou Network Technology Service Center in Dingtao District, Heze City, which can be exploited by attackers...
Hefei Tianxun Information Technology Co., Ltd. pushes Couponer CMS with SQL injection vulnerability
Push Couponer CMS is a completely free Taobao coupon website source code program. Ltd. Push Couponer CMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...
SQL Injection Vulnerability in Lotus Coupon System
LOTUS Coupon System is a WeChat-based e-coupon operation and distribution system for merchants in the same city, which allows merchants to issue coupons online, underwrite online and realize the functions of underwriting as a member. There is a SQL injection vulnerability in the LODE Coupon Syste...
How to Avoid Spam—Using Disposable Contact Information
The next time you sign up for a coupon code or retail promotion, use these apps to avoid spam text and email messages...
SQL Injection Vulnerability in Ziou Technology's Lotto Coupon System
LOTUS Coupon System is a WeChat-based e-coupon operation and distribution system for merchants in the same city. There is a SQL injection vulnerability in Ziou Technology's LODE Same Town Coupon System, which can be exploited by attackers to obtain sensitive information from the database...
Changsha Yanza Network Technology Co., Ltd. wow coupon app has information leakage vulnerability
Wow Coupon app is a mobile shopping software with a wide variety of high-quality products, and a large number of large coupons. Changsha Yanza Network Technology Co. Wow Coupon app has information leakage vulnerabilities that can be exploited by attackers to obtain sensitive information...
Command Execution Vulnerability in Coupon Pusher CMS
Push Couponer CMS is a completely free Taobao coupon website source code program. A command execution vulnerability exists in Push Couponer CMS, which can be exploited by attackers to execute malicious code...
Coupon Pusher CMS suffers from XSS vulnerability (CNVD-2020-26263)
Push Couponer CMS is a PHP Taobao coupon website system developed by PHP+MySQL. Push Coupon CMS has an XSS vulnerability that can be exploited by attackers to execute malicious scripts and obtain administrator cookies...
WordPress WooCommerce Smart Coupons premium plugin <= 4.6.0 - Unauthenticated Coupon Creation vulnerability
Unauthenticated Coupon Creation vulnerability discovered by WordFence in WordPress WooCommerce Smart Coupons premium plugin versions = 4.6.0. Solution Update the WordPress WooCommerce Smart Coupons premium plugin to the latest available version at least 4.6.5...
Coupon Pusher CMS suffers from XSS vulnerability
Push Couponer CMS is a completely free Taobao coupon website source code program, can automatically collect goods with coupons, automatically apply for high commission plan. Push Couponer CMS has an XSS vulnerability that can be exploited by attackers to obtain administrator cookies...