5295 matches found
de.trovit.com IFRAME Injection vulnerability
Vulnerable URL: http://de.trovit.com/jobs/index.php/cod.frame/url.http%253A%252F%252Fwww.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 21.07.2017 Latest check for patch:| 21.07.2017 13:31 GMT Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed...
springmeadownursery.com IFRAME Injection vulnerability
Vulnerable URL: http://springmeadownursery.com/search.php?q=%3Ciframe+src%3D%22http%3A%2F%2Fwww.openbugbounty.org%22%3E%3C%2Fiframe%3E Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 12:35 GMT Vulnerability type:| IFRAME Injection Vulnerability...
library.msu.ac.th IFRAME Injection vulnerability
Vulnerable URL: http://library.msu.ac.th/webu/dublin.linkout.php?url=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 10:56 GMT Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa...
ostwuerttemberg.de IFRAME Injection vulnerability
Vulnerable URL: http://www.ostwuerttemberg.de/de/fde.asp?page=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| 16280167 VIP website status:...
118go.com IFRAME Injection vulnerability
Open Bug Bounty ID: OBB-174081 Description| Value ---|--- Affected Website:| 118go.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Iframe Injection / CWE-79 CVSSv3 Score:| 6.1...
colorado.edu IFRAME Injection vulnerability
Vulnerable URL: http://www.colorado.edu/eventscalendar/cgi-bin/frame.cgi?parent=viewURL=https://www.openbugbounty.org" name="bottom" frameborder="no" marginwidth="0" marginheight="0" Details: Description| Value ---|--- Patched:| Yes, at 27.08.2016 Latest check for patch:| 27.08.2016 08:17 GMT...
yellowpages.com.vn IFRAME Injection vulnerability
Vulnerable URL: http://www.yellowpages.com.vn/homepages.php?url=www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| 1752205 VIP website status:| No...
Microsoft Internet Explorer Local Filename Information Disclosure Vulnerability
Internet Explorer is a web browser from Microsoft. Microsoft Internet Explorer has different feedback in the file:// URL for existing and non-existing files, and if used in conjunction with an HTML5 sandbox iframe, a local attacker could exploit this vulnerability to obtain local file existence...
CVE-2016-3321
Microsoft Internet Explorer 10 and 11 load different files for attempts to open a file:// URL depending on whether the file exists, which allows local users to enumerate files via vectors involving a file:// URL and an HTML5 sandbox iframe, aka "Internet Explorer Information Disclosure...
August 9, 2016 — KB3176492 (OS Build 10240.17071)
None None...
August 9, 2016 — KB3176493 (OS Build 10586.545)
None None...
egitimcafe.com IFRAME Injection vulnerability
Vulnerable URL: http://egitimcafe.com/redirector.php?url=http://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| 3580765 VIP website status:| No...
CVE-2016-1474
Cisco Prime Infrastructure 2.22 does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting XFS" issue, aka Bug ID CSCuw65846, a different...
CVE-2016-1474
Cisco Prime Infrastructure 2.22 does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting XFS" issue, aka Bug ID CSCuw65846, a different...
CVE-2016-5262
Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler attributes of a MARQUEE element within a sandboxed IFRAME element that lacks the sandbox="allow-scripts" attribute value, which makes it easier for remote attackers to conduct cross-site scripting XSS...
DEBIAN-CVE-2016-5262
Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler attributes of a MARQUEE element within a sandboxed IFRAME element that lacks the sandbox="allow-scripts" attribute value, which makes it easier for remote attackers to conduct cross-site scripting XSS...
CVE-2016-5262
Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler attributes of a MARQUEE element within a sandboxed IFRAME element that lacks the sandbox="allow-scripts" attribute value, which makes it easier for remote attackers to conduct cross-site scripting XSS...
Cisco Prime Infrastructure Cross-Frame Scripting Vulnerability
A vulnerability in the web interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to execute a cross-frame scripting XFS attack. This vulnerability is due to insufficient HTML iframe protection. An attacker could exploit this vulnerability by directing a user to a...
molotow.com XSS vulnerability
Vulnerable URL: http://www.molotow.com/typo3conf/ext/slmolotowproducts/iframe.php?h="=x Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 23:08 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 522903 VIP website...
CVE-2016-5262
Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler attributes of a MARQUEE element within a sandboxed IFRAME element that lacks the sandbox="allow-scripts" attribute value, which makes it easier for remote attackers to conduct cross-site scripting XSS...