203 matches found
Drupal Ubercart Discount Coupons Module Cross-Site Scripting Vulnerability
Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Ubercart Discount Coupons is one of the modules used to set up coupons for the Ubercart store. A cross-site scripting vulnerability exists in the Drupal Ubercart Discount Coupons module...
SA-CONTRIB-2015-064 - Ubercart Discount Coupons - Cross Site Scripting (XSS)
Ubercart Discount Coupons module provides discount coupons for Ubercart stores. The module doesn't sufficiently sanitize user supplied text in some administration pages, thereby exposing a Cross Site Scripting vulnerability. The vulnerability is mitigated by the fact that an attacker must have a...
CVE-2014-6993
The Codeeta Coupons aka com.codeeta.promos application 1.0.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Design/Logic Flaw
The Codeeta Coupons aka com.codeeta.promos application 1.0.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6993
The CVE-2014-6993 entry concerns the Codeeta Coupons (com.codeeta.promos) Android app version 1.0.5, which does not verify X.509 SSL certificates. This weakness enables a man‑in‑the‑middle attacker to spoof the server and exfiltrate sensitive information via a crafted certificate. The vulnerabili...
CVE-2014-6993
The Codeeta Coupons aka com.codeeta.promos application 1.0.5 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6893
The Pushpins Grocery Coupons aka com.pushpinsapp.pushpins application 1.56 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Design/Logic Flaw
The Pushpins Grocery Coupons aka com.pushpinsapp.pushpins application 1.56 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-6893
The CVE-2014-6893 entry affects the Android app Pushpins Grocery Coupons (com.pushpinsapp.pushpins) version 1.56. The root cause is that the app does not validate X.509 certificates from SSL servers, enabling a Man-in-the-Middle attacker to spoof servers and exfiltrate sensitive data via a crafte...
CVE-2014-6890
The CVE-2014-6890 entry applies to the CouponCabin - Coupons & Deals Android app (com.couponcabin), version 3.6. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man‑in‑the‑middle attackers to spoof servers and exfiltrate sensitive information via a ...
CVE-2014-6893
The Pushpins Grocery Coupons aka com.pushpinsapp.pushpins application 1.56 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Click N Print Coupons <= 2006.01 - (key) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Script Name: Click N' Print Coupons = V2005.01 key Remote SQL Injection Exploit Coded by : ajann Author : ajann Contact : : S.Page : http://www.websitedesignsforless.com $$ : $9.95 Message : Tum Musluman Aleminin Kurban Bayrami Mubarek Olsun .. .....
VamCart v0.9 CMS - Multiple Web Vulnerabilities
Document Title: =============== VamCart v0.9 CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=622 Release Date: ============= 2012-06-24 Vulnerability Laboratory ID VL-ID: ==================================== 622 Common...
Student Charged With Posting Counterfeit Coupons to 4Chan
A student at New York’s Rochester Institute of Technology RIT has been arrested for producing hundreds of thousands of dollars worth of fake coupons and posting them to 4chan and other websites. Lucas Henderson, a 22-year old computer security student from Lubbock, Texas was charged with wire fra...
3) Beware of strangers bearing e-bates
With much of the world in the grips of a recession, coupon clipping is suddenly in vogue again. That’s true for online shoppers, as well, where the hunger for e-coupons has spawned legions of Web sites, including CouponSherpa.com, Ebates.com and the like. While reputable sites like these can be...
Coupons By Pass Admin Vulnerability
Exploit for unknown platform in category web applications =================================== Coupons By Pass Admin Vulnerability =================================== ======================================================================================== | Title : Coupons By Pass Admin...
Coupons Direct Access Bypass
======================================================================================== | Title : Coupons By Pass Admin Vulnerability | Author : indoushka | email : [email protected] | Home : www.iq-ty.com | Web Site : | Dork : Copyright 2007. Coupons and Deals Directory | Tested on: windows...
CVE-2007-4143
user.php in the Billing Control Panel in phpCoupon allows remote authenticated users to obtain Premium Member status, and possibly acquire free coupons, via a modified URL containing a certain billing parameter and REQ=auth, status=success, and custom=upgrade substrings, possibly related to PayPa...
Design/Logic Flaw
user.php in the Billing Control Panel in phpCoupon allows remote authenticated users to obtain Premium Member status, and possibly acquire free coupons, via a modified URL containing a certain billing parameter and REQ=auth, status=success, and custom=upgrade substrings, possibly related to PayPa...
CVE-2007-4143
user.php in the Billing Control Panel in phpCoupon allows remote authenticated users to obtain Premium Member status, and possibly acquire free coupons, via a modified URL containing a certain billing parameter and REQ=auth, status=success, and custom=upgrade substrings, possibly related to PayPa...