The microweber application allows large characters to insert in the input field "Coupons" which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request.

Proof of Concept 1.Go to "Settings" click on "Coupons" and Add a new Coupons 2.Go to this drive link:- https://drive.google.com/file/d/1CcVCHWbvMk07IZ5v4dojrdJbC43ufhh/view?usp=sharing copy the payload and paste it on the "Code" input field 3.You will see the application accepts large characters...

WordPress Coupons plugin <= 1.3.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Coupons plugin versions = 1.3.0. Solution Update the WordPress Coupons plugin to the latest available version at least 1.4.0...

WordPress WP Coupons and Deals – WordPress Coupon Plugin plugin <= 3.1.11 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WP Coupons and Deals – WordPress Coupon Plugin plugin versions = 3.1.11. Solution Update the WordPress WP Coupons and Deals – WordPress Coupon Plugin plugin to the latest available version at least...

WordPress WooCommerce Bulk Edit Coupons – WP Sheet Editor plugin < 1.3.28 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WooCommerce Bulk Edit Coupons – WP Sheet Editor plugin versions 1.3.28. Solution Update the WordPress WooCommerce Bulk Edit Coupons – WP Sheet Editor plugin to the latest available version at least 1.3.28...

WordPress WP Coupons and Deals – WordPress Coupon Plugin plugin <= 3.1.11 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WP Coupons and Deals – WordPress Coupon Plugin plugin versions = 3.1.11. Solution Update the WordPress WP Coupons and Deals – WordPress Coupon Plugin plugin to the latest available version at least 3.1.12...

WordPress Coupons plugin <= 1.3.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Coupons plugin versions = 1.3.0. Solution Update the WordPress Coupons plugin to the latest available version at least 1.4.0...

WordPress WooCommerce Bulk Edit Coupons – WP Sheet Editor plugin < 1.3.28 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WooCommerce Bulk Edit Coupons – WP Sheet Editor plugin versions 1.3.28. Solution Update the WordPress WooCommerce Bulk Edit Coupons – WP Sheet Editor plugin to the latest available version at least...

WordPress Smart Coupons for WooCommerce plugin <= 1.3.5 - Authenticated SQL injection (SQLi) vulnerability

Authenticated SQL injection SQLi vulnerability discovered in WordPress Smart Coupons for WooCommerce plugin versions = 1.3.5. Solution Update the WordPress Smart Coupons for WooCommerce plugin to the latest available version at least 1.3.6...

CVE-2021-36454

Cross Site Scripting XSS vulnerability in Naviwebs Navigate Cms 2.9 via the navigate-quickse parameter to 1 backups\backups.php, 2 blocks\blocks.php, 3 brands\brands.php, 4 comments\comments.php, 5 coupons\coupons.php, 6 feeds\feeds.php, 7 functions\functions.php, 8 items\items.php, 9...

vaping.coupons Cross Site Scripting vulnerability OBB-1481174

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Coupon Pusher CMS suffers from XSS vulnerability (CNVD-2020-26263)

Push Couponer CMS is a PHP Taobao coupon website system developed by PHP+MySQL. Push Coupon CMS has an XSS vulnerability that can be exploited by attackers to execute malicious scripts and obtain administrator cookies...

WooCommerce Smart Coupons < 4.6.5 - Unauthenticated Coupon Creation

By crafting a request with all of the necessary parameters, attackers could generate and send themselves valid gift certificates for a victim’s WooCommerce store. This vulnerability has been patched as of WooCommerce Smart Coupons 4.6.5...

WordPress WooCommerce Smart Coupons premium plugin <= 4.6.0 - Unauthenticated Coupon Creation vulnerability

Unauthenticated Coupon Creation vulnerability discovered by WordFence in WordPress WooCommerce Smart Coupons premium plugin versions = 4.6.0. Solution Update the WordPress WooCommerce Smart Coupons premium plugin to the latest available version at least 4.6.5...

Catalog Traversal Vulnerability in Coupon Pusher CMS

Push Couponer CMS is a completely free Taobao coupon website source code program, can automatically collect goods with coupons, automatically apply for high commission plan. Push Couponer CMS has a directory traversal vulnerability that can be exploited by attackers to obtain sensitive informatio...

azypages.com XSS vulnerability

Open Bug Bounty ID: OBB-673907 Description| Value ---|--- Affected Website:| azypages.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PrestaShop < 1.6.1.19 - BlowFish ECD Privilege Escalation Exploit

Exploit for php platform in category web applications !/usr/bin/env python3 PrestaShop = 1.6.1.19 Privilege Escalation Charles Fol 2018-07-10 See https://ambionics.io/blog/prestashop-privilege-escalation The condition for this exploit to work is for an employee to have the same password as a...

PrestaShop 1.6.1.19 - BlowFish ECD Privilege Escalation

PrestaShop 1.6.1.19 - BlowFish ECD Privilege Escalation !/usr/bin/env python3 PrestaShop = 1.6.1.19 Privilege Escalation Charles Fol 2018-07-10 See https://ambionics.io/blog/prestashop-privilege-escalation The condition for this exploit to work is for an employee to have the same password as a...

affordablegranitenh.com XSS vulnerability

Vulnerable URL: http://www.affordablegranitenh.com/Granite-Countertop-Coupons.asp?color=1/-///'/"//--...

DesiDime Coupons & Offers - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application DesiDime Coupons & Offers published at the 'play' market has multiple vulnerabilities...

MC Hosting Coupons Cross-Site Request Forgery Vulnerability

MC Hosting Coupons is a PHP script for managing coupons. A cross-site request forgery vulnerability exists in MC Hosting Coupons. An attacker can exploit the vulnerability to trick users into clicking on it to obtain sensitive user information...