Mavenlink: Clickjacking & CSRF attack can be done at https://app.mavenlink.com/login

Hello, My name is Vineet bhardwaj. i am security researcher and i pen test your website https://app.mavenlink.com/login and i found there is click jacking attack and CSRF attack can be done. POC: CSRF testing frame opacity: 0.5; border: none; position: absolute; top: 0px; left: 0px; z-index: 1000...

Factlink: Click jacking

Vulnerability description Clickjacking User Interface redress attack, UI redress attack, UI redressing is a malicious technique of tricking a Web user into clicking on something different from what the user perceives they are clicking on, thus potentially revealing confidential information or...

Google Chrome < 35.0.1916.114 Multiple Vulnerabilities

Binary data 8263.pasl...

CVE-2013-7234

Simple Machines Forum SMF before 1.1.19 and 2.x before 2.0.6 allows remote attackers to conduct clickjacking attacks via an X-Frame-Options header...

Design/Logic Flaw

Simple Machines Forum SMF before 1.1.19 and 2.x before 2.0.6 allows remote attackers to conduct clickjacking attacks via an X-Frame-Options header...

CVE-2013-7234

Simple Machines Forum SMF before 1.1.19 and 2.x before 2.0.6 allows remote attackers to conduct clickjacking attacks via an X-Frame-Options header...

CVE-2013-7234

CVE-2013-7234 affects Simple Machines Forum (SMF). The vulnerability exists in SMF versions prior to 1.1.19 and prior to 2.0.6, where an improper handling of the page framing allows remote attackers to perform clickjacking via an X-Frame-Options header. The NVD entry lists this as a remote, heade...

PT-2014-3296

Name of the Vulnerable Software and Affected Versions Simple Machines Forum SMF versions prior to 1.1.19 Simple Machines Forum SMF versions 2.x prior to 2.0.6 Description The issue allows remote attackers to conduct clickjacking attacks. This is possible due to the lack of an appropriate...

CVE-2013-7234: Improper Input Validation

Simple Machines Forum SMF before 1.1.19 and 2.x before 2.0.6 allows remote attackers to conduct clickjacking attacks via an X-Frame-Options header...

DEBIAN-CVE-2014-2554

OTRS 3.1.x before 3.1.21, 3.2.x before 3.2.16, and 3.3.x before 3.3.6 allows remote attackers to conduct clickjacking attacks via an IFRAME element...

CVE-2014-2554

OTRS 3.1.x before 3.1.21, 3.2.x before 3.2.16, and 3.3.x before 3.3.6 allows remote attackers to conduct clickjacking attacks via an IFRAME element...

CVE-2014-2554

OTRS 3.1.x before 3.1.21, 3.2.x before 3.2.16, and 3.3.x before 3.3.6 allows remote attackers to conduct clickjacking attacks via an IFRAME element...

CVE-2014-2554

OTRS 3.1.x before 3.1.21, 3.2.x before 3.2.16, and 3.3.x before 3.3.6 allows remote attackers to conduct clickjacking attacks via an IFRAME element...

Code injection

OTRS 3.1.x before 3.1.21, 3.2.x before 3.2.16, and 3.3.x before 3.3.6 allows remote attackers to conduct clickjacking attacks via an IFRAME element...

CVE-2014-2554

Removed by vendor...

CVE-2014-2554

OTRS 3.1.x before 3.1.21, 3.2.x before 3.2.16, and 3.3.x before 3.3.6 allows remote attackers to conduct clickjacking attacks via an IFRAME element...

CVE-2014-2554

OTRS 3.1.x before 3.1.21, 3.2.x before 3.2.16, and 3.3.x before 3.3.6 allows remote attackers to conduct clickjacking attacks via an IFRAME element...

CVE-2014-2554

CVE-2014-2554 affects OTRS:1.x/2.x? No—3.1.x before 3.1.21, 3.2.x before 3.2.16, and 3.3.x before 3.3.6 are vulnerable to remote clickjacking via an IFRAME. The issue is exploitable by a remote attacker; impact is limited to clickjacking (no confidentiality nor integrity loss in the CVSS data, bu...

PT-2014-4778

Name of the Vulnerable Software and Affected Versions OTRS versions 3.1.x through 3.1.20 OTRS versions 3.2.x through 3.2.15 OTRS versions 3.3.x through 3.3.5 Description The issue allows remote attackers to conduct clickjacking attacks via an IFRAME element. Recommendations For OTRS versions 3.1....

CVE-2014-2554: Improper Input Validation

OTRS 3.1.x before 3.1.21, 3.2.x before 3.2.16, and 3.3.x before 3.3.6 allows remote attackers to conduct clickjacking attacks via an IFRAME element...