countyoffice.org IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-269505 Description| Value ---|--- Affected Website:| countyoffice.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Iframe Injection / CWE-79 CVSSv3 Score:| 6.1...

bellotube.com IFRAME Injection vulnerability

Vulnerable URL: http://bellotube.com/en/search/" XANY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 18.08.2017 Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| 28333 VIP website status:| Yes Check bellotube.com SSL connection:...

pornkino.to IFRAME Injection vulnerability

Vulnerable URL: http://pornkino.to/?s=" XANY Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| 32366 VIP website status:| Yes Coordinated Disclosure Timeline: Description| Value ---|--- Vulnerability...

freeporncategories.com IFRAME Injection vulnerability

Vulnerable URL: http://freeporncategories.com/?search=" XANY Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| 68956 VIP website status:| No Check freeporncategories.com SSL connection:| Grade: F...

hi.4pornhd.com IFRAME Injection vulnerability

Vulnerable URL: http://hi.4pornhd.com/?search=" XANY Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 16:40 GMT Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

golf.de IFRAME Injection vulnerability

Vulnerable URL: https://www.golf.de/publish/suche?searchFor='"--! XANY Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| 103667 VIP website status:| No Check golf.de SSL connection:| Grade: F Coordinat...

nude-gals.com IFRAME Injection vulnerability

Vulnerable URL: https://www.nude-gals.com/search.php?word= XANY =1=00==00=advm Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 16:37 GMT Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| 40845 VIP websi...

telecontact.ma IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-265698 Description| Value ---|--- Affected Website:| telecontact.ma Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Iframe Injection / CWE-79 CVSSv3 Score:| 6.1...

businesstoday.in IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-265613 Description| Value ---|--- Affected Website:| businesstoday.in Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Cisco Patches Another Critical Ormandy Bug in WebEx Extension

Cisco has provided updates today for WebEx browser extensions for Chrome and Firefox after Google Project Zero researcher Tavis Ormandy and Divergent Security’s Cris Neckar privately disclosed a vulnerability that could be abused to remotely run code on a computer running the browser extension...

webtools.smumn.edu IFRAME Injection vulnerability

Vulnerable URL: https://webtools.smumn.edu/gpde/WEBCOWEBFORM.CFM?formid=" XANY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.08.2017 Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

nationalrail.co.uk IFRAME Injection vulnerability

Vulnerable URL: http://www.nationalrail.co.uk/servicedisruptions/currentAndFuture.aspx?TravelDate=" xany Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.08.2017 Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| 4759 VIP websit...

panasonic.com XSS vulnerability

Open Bug Bounty ID: OBB-264936 Description| Value ---|--- Affected Website:| panasonic.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

sacc.to IFRAME Injection vulnerability

Vulnerable URL: http://www.sacc.to/cgi/common/redirect.asp?site=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.10.2017 Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| 17781040 VIP website...

senatour.avablog.ir IFRAME Injection vulnerability

Vulnerable URL: http://senatour.avablog.ir/gotolink/openbugbounty.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 05.10.2017 Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

controlsformotion.com IFRAME Injection vulnerability

Vulnerable URL: http://www.controlsformotion.com/iframelinks.aspx?link=openbugbounty.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 05.10.2017 Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

Cross site scripting

Pulse Connect Secure 8.3R1 has Reflected XSS in launchHelp.cgi. The helpLaunchPage parameter is reflected in an IFRAME element, if the value contains two quotes. It properly sanitizes quotes and tags, so one cannot simply close the src with a quote and inject after that. However, an attacker can...

CVE-2017-11195

Pulse Connect Secure 8.3R1 has Reflected XSS in launchHelp.cgi. The helpLaunchPage parameter is reflected in an IFRAME element, if the value contains two quotes. It properly sanitizes quotes and tags, so one cannot simply close the src with a quote and inject after that. However, an attacker can...

CVE-2017-11195

Pulse Connect Secure 8.3R1 has Reflected XSS in launchHelp.cgi. The helpLaunchPage parameter is reflected in an IFRAME element, if the value contains two quotes. It properly sanitizes quotes and tags, so one cannot simply close the src with a quote and inject after that. However, an attacker can...

PT-2017-11814

Name of the Vulnerable Software and Affected Versions Pulse Connect Secure version 8.3R1 Description The issue concerns a Reflected XSS in the launchHelp.cgi component. Specifically, the helpLaunchPage parameter is reflected in an IFRAME element. If the value of this parameter contains two quotes...