CVE-2017-5421

CVE-2017-5421 is reported as a print preview spoofing issue affecting Mozilla Firefox and Mozilla Thunderbird when popup windows are enabled. The vulnerability description states that a malicious site could spoof the contents of the print preview window, causing user confusion about which site is...

Reflected Cross-Site Scripting Vulnerability in ZZCMS Version 8.2

zzcms is a free website builder developed in asp language. A reflective cross-site scripting vulnerability exists in the step6.php file in version 8.2 of zzcms, which allows an attacker to construct an XSS statement, perform a pop-up box operation, and obtain information such as a user's cookie...

CVE-2017-3528

Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite subcomponent: Popup windows lists of values, datepicker, etc.. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily "exploitable" vulnerability allows unauthenticated...

PT-2017-15963

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 Description The issue affects the Oracle Applications Framework component, specifically the Popup windows subcomponent. It allows an unauthenticated attacker with network...

UBUNTU-CVE-2017-5421

A malicious site could spoof the contents of the print preview window if popup windows are enabled, resulting in user confusion of what site is currently loaded. This vulnerability affects Firefox 52 and Thunderbird 52...

Unspecified Vulnerability in Oracle E-Business Suite Oracle Applications Framework Popup Windows Component

Oracle E-Business Suite is a new generation of e-business suite from Oracle. An unspecified security vulnerability exists in the Oracle E-Business Suite Oracle Applications Framework Popup Windows component, which could be exploited by remote attackers to submit a special request to modify data...

CVE-2016-0459

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote authenticated users to affect integrity via unknown vectors related to Popup Windows...

CVE-2016-0459

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote authenticated users to affect integrity via unknown vectors related to Popup Windows...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote authenticated users to affect integrity via unknown vectors related to Popup Windows...

CVE-2016-0459

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote authenticated users to affect integrity via unknown vectors related to Popup Windows...

PT-2016-4226

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 11.5.10.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 Description The issue affects the integrity of the system, allowing remote authenticated users to exploit it via unknown vectors related to Popup Windows in the Oracle...

CVE-2016-0459: Undefined Security Weakness

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.1.3, 12.2.3, 12.2.4, and 12.2.5 allows remote authenticated users to affect integrity via unknown vectors related to Popup Windows...

CVE-2015-2610

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to Popup windows...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to Popup windows...

CVE-2015-2610

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to Popup windows...

CVE-2015-2610

CVE-2015-2610 concerns an unspecified vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (versions 12.0.6, 12.1.3, 12.2.3, 12.2.4) that allows remote attackers to compromise integrity via unknown vectors related to popup windows. The affected product is Oracle...

PT-2015-1834

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.0.6 through 12.2.4 Description The issue is related to unspecified errors in the code of the Oracle Applications Framework component. It allows remote attackers to affect the integrity of information via...

CVE-2015-2610: Undefined Security Weakness

Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via unknown vectors related to Popup windows...

Webmin < 1.690 Multiple XSS

According to its self-reported version, the Webmin install hosted on the remote host is prior to version 1.690. It is, therefore, affected by multiple cross-site scripting vulnerabilities : - The application is affected by multiple unspecified cross-site scripting vulnerabilities. CVE-2014-3885 -...

CVE-2014-3924

Multiple cross-site scripting XSS vulnerabilities in Webmin before 1.690 and Usermin before 1.600 allow remote attackers to inject arbitrary web script or HTML via vectors related to popup windows...