bemyguest.hr IFRAME Injection vulnerability

Vulnerable URL: http://www.bemyguest.hr/property.php?id=22=14〈=%27%22%3E%3Ciframe%20src=https://xssposed.org%3EEN Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| 137460...

ikon.ffri.hr IFRAME Injection vulnerability

Vulnerable URL: http://ikon.ffri.hr/index.php?ID=%3Ciframe%20src=https://xssposed.org%3E3〈=Eng Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 21:56 GMT Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank|...

hotel-livadic.hr IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-142651 Description| Value ---|--- Affected Website:| hotel-livadic.hr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Iframe Injection / CWE-79 CVSSv3 Score:| 6.1...

propisi.hr IFRAME Injection vulnerability

Vulnerable URL: http://www.propisi.hr/index.php?page=search Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| 642521 Google Pagerank| 4 VIP website status:| No Check...

energoplan.hr IFRAME Injection vulnerability

Vulnerable URL: http://www.energoplan.hr/reference.php?id=%27%22%3E%3Ciframe%20src=https://xssposed.org%3E42 Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 21:00 GMT Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclos...

euraxess.hr IFRAME Injection vulnerability

Vulnerable URL: http://www.euraxess.hr/sitegenius/search.php?keyword=%22%3E%3Ciframe%20src=https://xssposed.org%3E Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 21:56 GMT Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly...

iuc.hr IFRAME Injection vulnerability

Vulnerable URL: http://www.iuc.hr/conference-details.php?id=%27%22%3E%3Ciframe%20src=https://xssposed.org%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 21:00 GMT Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclos...

medix.com.hr IFRAME Injection vulnerability

Vulnerable URL: http://www.medix.com.hr/search.php?q=%3Ciframe%20src=https://xssposed.org%3Etesteer=0=0 Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 21:00 GMT Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed...

vrijeme.hr IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-142644 Description| Value ---|--- Affected Website:| vrijeme.hr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Iframe Injection / CWE-79 CVSSv3 Score:| 6.1...

prognoza.hr IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-142643 Description| Value ---|--- Affected Website:| prognoza.hr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Iframe Injection / CWE-79 CVSSv3 Score:| 6.1...

CVE-2016-1967

Mozilla Firefox before 45.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that leverages history.back and performance.getEntries calls aft...

DEBIAN-CVE-2016-1967

Mozilla Firefox before 45.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that leverages history.back and performance.getEntries calls aft...

CVE-2016-1967

Mozilla Firefox before 45.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that leverages history.back and performance.getEntries calls aft...

DEBIAN-CVE-2016-1955

Mozilla Firefox before 45.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information by reading a Content Security Policy CSP violation report that contains path information associated with an IFRAME element...

CVE-2016-1955

Mozilla Firefox before 45.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information by reading a Content Security Policy CSP violation report that contains path information associated with an IFRAME element...

CVE-2016-1955

Mozilla Firefox before 45.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information by reading a Content Security Policy CSP violation report that contains path information associated with an IFRAME element...

CVE-2016-1967

Mozilla Firefox before 45.0 does not properly restrict the availability of IFRAME Resource Timing API times, which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that leverages history.back and performance.getEntries calls aft...

CVE-2016-1955

Mozilla Firefox before 45.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information by reading a Content Security Policy CSP violation report that contains path information associated with an IFRAME element...

CVE-2016-1955

Mozilla Firefox before 45.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information by reading a Content Security Policy CSP violation report that contains path information associated with an IFRAME element...

clrn.org IFRAME Injection vulnerability

Vulnerable URL: http://www.clrn.org/search/search.cfm?resourceType=%3C/title%3E%27%22%3E%3Ciframe%20src=https://xssposed.org%3E%3C/iframe%3Eelr=%20bstract==1 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa...