Joomla Modern Booking 1.0 Component - coupon Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla Modern Booking - SQL Injection Author: Hamed Izadi IRAN Vendor Homepage : https://extensions.joomla.org/extensions/extension/vertical-markets/booking-a-reservations/modern-booking/ Vendor Homepage :...

Joomla! Component Coupon v3.5 - SQL Injection

Joomla! Component Coupon v3. 5 - SQL Injection Joomla! Component Coupon v3. 5, the presence of the parameter filter is not strict, leading to a sql injection vulnerability, if the other server is turned on the error display, can directly use, if you turn off the error display, you can use...

Joomla! Component Modern Booking 1.0 - 'coupon' SQL Injection

Exploit Title: Joomla Modern Booking - SQL Injection Author: Hamed Izadi IRAN Vendor Homepage : https://extensions.joomla.org/extensions/extension/vertical-markets/booking-a-reservations/modern-booking/ Vendor Homepage : https://www.unikalus.com/ Category: Webapps Tested on: Ubuntu Versions: 1.0...

Coupon manager, 3.5

Coupon manager by joomla6teen.com, 3.5, SQL Injection...

Joomla Coupon 3.5 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Coupon v3.5 - SQL Injection Google Dork: inurl:index.php?option=comcoupon Date: 03.03.2017 Vendor Homepage: http://joomla6teen.com/ Software:...

Joomla! Component Coupon 3.5 - SQL Injection

Joomla! Component Coupon 3.5 - SQL Injection Exploit Title: Joomla! Component Coupon v3.5 - SQL Injection Google Dork: inurl:index.php?option=comcoupon Date: 03.03.2017 Vendor Homepage: http://joomla6teen.com/ Software:...

Joomla! Component Coupon 3.5 - SQL Injection

Exploit Title: Joomla! Component Coupon v3.5 - SQL Injection Google Dork: inurl:index.php?option=comcoupon Date: 03.03.2017 Vendor Homepage: http://joomla6teen.com/ Software: https://extensions.joomla.org/extensions/extension/e-commerce/gifts-a-coupons/coupon/ Demo:...

coupon-valide.com XSS vulnerability

Vulnerable URL: http://www.coupon-valide.com/recherche.php?nom=%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4631530 VIP website...

Free Twitter Follower Coupon - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Free Twitter Follower Coupon published at the 'play' market has multiple vulnerabilities...

Wordpress csv2wpec-coupon plugin arbitrary file upload vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Software Foundation. csv2wpec-coupon is one of the plugins that provides import/export WP e-commerce coupons. An arbitrary file upload vulnerability exists in version v1.1 of the Wordpress csv2wpec-coupon...

CVE-2015-1000013

Remote file upload vulnerability in wordpress plugin csv2wpec-coupon v1.1...

Design/Logic Flaw

Remote file upload vulnerability in wordpress plugin csv2wpec-coupon v1.1...

CVE-2015-1000013

Remote file upload vulnerability in wordpress plugin csv2wpec-coupon v1.1...

CVE-2015-1000013

CVE-2015-1000013 affects WordPress plugin csv2wpec-coupon v1.1. The vulnerability is an arbitrary file upload via csv2wpecCoupon_FileUpload.php caused by improper input sanitization of the uploaded file. The provided PoC indicates unauthenticated remote file upload is possible, using a crafted re...

Coupon CMS URL Redirection Vulnerability

Coupon CMS is an open source PHP coupon system. The system supports the setup of chargeable coupons , which can effectively increase the income of the site . A URL redirection vulnerability exists in Coupon CMS version 5.00, as the program fails to adequately filter user-submitted input. A remote...

Coupon CMS 5.00 Open Redirect

======================================================================== | Title : Coupon CMS v5.00 URL Redirection Vulnerability | Author : indoushka | email : https://www.facebook.com/Indoushka.official/ | Tested on : windows 8.1 FranASSais V.Pro | Version : v5.00 | Vendor :...

Instacart: Race Condition in Redeeming Coupons

Hello, There exists a race condition in redeeming coupons, allowing a user to redeem the same coupon multiple times, and stacking savings added. This allows for a user to get virtually any discount. POC: 1. Visit your account and select 'Promo Codes'. 2. Select redeem promo code, and add any prom...

CVE-2016-4837

SQL injection vulnerability in the Seed Coupon plugin before 1.6 for EC-CUBE allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the Seed Coupon plugin before 1.6 for EC-CUBE allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2016-4837

The CVE-2016-4837 issue affects the EC-CUBE ecosystem: the Seed Coupon plugin (Coupon Plugin) is vulnerable to SQL injection (CWE-89) in versions before 1.6. The underlying flaw allows a remote attacker to manipulate or access database data via unspecified vectors. Impact is high, with potential ...