353 matches found
Threat Outbreak Alert: Fake Travel Information Email Messages on June 15, 2014
Medium Alert ID: 31784 First Published: 2013 November 15 14:41 GMT Last Updated: 2014 June 16 18:15 GMT Version: 10 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain travel discounts for the recipient. The text in the email message...
DiscuzX1. 5+ prop of the brush sub-vulnerability-vulnerability warning-the black bar safety net
If the user group set up"to purchase items a discount"option to buy when the price is discounted price, and sell when the price is not discounted price. That is the time to buy discount, sell when it is the original price. Buy: $magic'discountprice' = $G'group''magicsdiscount' ? intval$magic'pric...
Squirrelcart Cart Shop v3.3.4 - Multiple Web Vulnerabilities
Title: ====== Squirrelcart Cart Shop v3.3.4 - Multiple Web Vulnerabilities Date: ===== 2012-06-04 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=592 VL-ID: ===== 592 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: ===========...
Unfixed XSS vulnerability at www.discountcandleshop.com
Security researcher jath, has submitted on 09/07/2010 a cross-site-scripting XSS vulnerability affecting www.discountcandleshop.com, which at the time of submission ranked 381283 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is...
DDoS Extortionists Offer 'Discount' Competitor Attacks
One of the most novel approaches for acquiring new botnet clients is a weird combination consisting of direct DDoS extortion, followed by penalties for delayed response and the offering of 30% discount in case the victim wants to DDoS the competition once the ransom is paid. Read the full article...
Unfixed XSS vulnerability at www.24designs.net
Security researcher s0m3nak3dguy, has submitted on 01/03/2008 a cross-site-scripting XSS vulnerability affecting www.24designs.net, which at the time of submission ranked 5140669 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2008. It is...
Design/Logic Flaw
Hosting Controller 6.1 Hot fix 3.3 and earlier 1 allows remote attackers to change arbitrary user profiles via a request to Hosting/Addreseller.asp with modified loginname and email parameters; and 2 allows remote authenticated users to change a credit amount and increase a discount via an...
CVE-2007-6497
Hosting Controller 6.1 Hot fix 3.3 and earlier 1 allows remote attackers to change arbitrary user profiles via a request to Hosting/Addreseller.asp with modified loginname and email parameters; and 2 allows remote authenticated users to change a credit amount and increase a discount via an...
CVE-2007-6497
Hosting Controller 6.1 Hot fix 3.3 and earlier 1 allows remote attackers to change arbitrary user profiles via a request to Hosting/Addreseller.asp with modified loginname and email parameters; and 2 allows remote authenticated users to change a credit amount and increase a discount via an...
Design/Logic Flaw
eZ publish before 3.8.9, and 3.9 before 3.9.3, does not properly check permissions on module views that lack a policy function, which has unknown impact and attack vectors, as demonstrated by a vulnerability in the discount functionality in the shop module...
CVE-2007-4493
eZ publish before 3.8.9, and 3.9 before 3.9.3, does not properly check permissions on module views that lack a policy function, which has unknown impact and attack vectors, as demonstrated by a vulnerability in the discount functionality in the shop module...
Unfixed XSS vulnerability at www.discount-inkjet-printer-ink-cartridges.com
Security researcher iNs uNkn0wn.eu CreW, has submitted on 07/10/2007 a cross-site-scripting XSS vulnerability affecting www.discount-inkjet-printer-ink-cartridges.com, which at the time of submission ranked 2826698 on the web according to Alexa. We manually validated and published a mirror of thi...
