CVE-2011-0003

MediaWiki before 1.16.1, when user or site JavaScript or CSS is enabled, allows remote attackers to conduct clickjacking attacks via unspecified vectors...

CVE-2011-0003

CVE-2011-0003 affects MediaWiki up to version 1.16.0 (before 1.16.1). When user or site JavaScript or CSS is enabled, it allows remote attackers to conduct clickjacking via unspecified vectors. The issue is discussed in multiple advisories (e.g., GLSA-201206-09) and Fedora updates reference CVE-2...

CVE-2011-0003

MediaWiki before 1.16.1, when user or site JavaScript or CSS is enabled, allows remote attackers to conduct clickjacking attacks via unspecified vectors...

PT-2011-2006

Name of the Vulnerable Software and Affected Versions MediaWiki versions prior to 1.16.1 Description The issue allows remote attackers to conduct clickjacking attacks via unspecified vectors when user or site JavaScript or CSS is enabled. Recommendations For versions prior to 1.16.1, update to...

CVE-2011-0003: Improper Input Validation

MediaWiki before 1.16.1, when user or site JavaScript or CSS is enabled, allows remote attackers to conduct clickjacking attacks via unspecified vectors...

CVE-2011-0399

Piwik before 1.1 does not prevent the rendering of the login form inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site...

Hardcoded credentials

Piwik before 1.1 does not prevent the rendering of the login form inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site...

CVE-2011-0399

PIWIK (before 1.1) is vulnerable to clickjacking because the login form can be rendered within a frame by a third-party page. Root cause: login page displayed in an iframe without proper frame busting. Impact: enables clickjacking via a crafted site. Exploitation details are not provided in the d...

CVE-2011-0399

Piwik before 1.1 does not prevent the rendering of the login form inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site...

CVE-2011-0399

Piwik before 1.1 does not prevent the rendering of the login form inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site...

CVE-2011-0399

Piwik before 1.1 does not prevent the rendering of the login form inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site...

PT-2011-2320

Name of the Vulnerable Software and Affected Versions Piwik versions prior to 1.1 Description The issue allows remote attackers to conduct clickjacking attacks via a crafted web site, making it easier to perform malicious actions by rendering the login form inside a frame in a third-party HTML...

CVE-2011-0399: Undefined Security Weakness

Piwik before 1.1 does not prevent the rendering of the login form inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site...

DTSA-207-1 mediawiki - clickjacking

Bulletin has no description...

FreeBSD : mediawiki -- Clickjacking vulnerabilities (e177c410-1943-11e0-9d1c-000c29ba66d2)

Clickjacking vulnerabilities : Clickjacking is a type of vulnerability discovered in 2008, which is similar to CSRF. The attack involves displaying the target webpage in a iframe embedded in a malicious website. Using CSS, the submit button of the form on the targeit webpage is made invisible, an...

mediawiki -- Clickjacking vulnerabilities

Clickjacking vulnerabilities: Clickjacking is a type of vulnerability discovered in 2008, which is similar to CSRF. The attack involves displaying the target webpage in a iframe embedded in a malicious website. Using CSS, the submit button of the form on the targeit webpage is made invisible, and...

Android Update Adds Protection From Mobile Clickjacking

Google released the latest version of its Android mobile operating system on Monday, adding security features that it says will make it tougher for mobile device users to be subjected to “clickjacking” attacks that trick them into clicking on hidden or disguised user interface elements. The compa...

Android Update Adds Protections For Mobile Clickjacking

Google released the latest version of its Android mobile operating system on Monday, adding security features that it says will make it tougher for mobile device users to be subjected to “clickjacking” attacks that trick them into clicking on hidden or disguised user interface elements. The compa...

How to Spot and Avoid Clickjacking Attacks on Facebook

When you see a post on a Facebook friend's wall that seems out of character, don't be too quick to click. Posts labeled "Pictures of girls in bikinis" or "All boys can stare at it but girls cannot" might be clickjacking attacks. These attacks typically don't carry malicious payloads, but they can...

Missing or Permissive X-Frame-Options HTTP Response Header

The remote web server in some responses sets a permissive X-Frame-Options response header or does not set one at all. The X-Frame-Options header has been proposed by Microsoft as a way to mitigate clickjacking attacks and is currently supported by all major browser vendors %NASLMINLEVEL 70300 C...