Mozilla Firefox ESR < 45.3 Multiple Vulnerabilities

Binary data 9485.prm...

ua.trovit.com IFRAME Injection vulnerability

Vulnerable URL: http://ua.trovit.com/rabota/index.php/cod.frame/url.http%253A%252F%252Fwww.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 22.07.2017 Latest check for patch:| 22.07.2017 05:19 GMT Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclos...

ru.trovit.com IFRAME Injection vulnerability

Vulnerable URL: http://ru.trovit.com/rabota/index.php/cod.frame/url.http%253A%252F%252Fwww.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 22.07.2017 Latest check for patch:| 22.07.2017 05:18 GMT Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclos...

de.trovit.com IFRAME Injection vulnerability

Vulnerable URL: http://de.trovit.com/jobs/index.php/cod.frame/url.http%253A%252F%252Fwww.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 21.07.2017 Latest check for patch:| 21.07.2017 13:31 GMT Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed...

springmeadownursery.com IFRAME Injection vulnerability

Vulnerable URL: http://springmeadownursery.com/search.php?q=%3Ciframe+src%3D%22http%3A%2F%2Fwww.openbugbounty.org%22%3E%3C%2Fiframe%3E Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 12:35 GMT Vulnerability type:| IFRAME Injection Vulnerability...

library.msu.ac.th IFRAME Injection vulnerability

Vulnerable URL: http://library.msu.ac.th/webu/dublin.linkout.php?url=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 10:56 GMT Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa...

ostwuerttemberg.de IFRAME Injection vulnerability

Vulnerable URL: http://www.ostwuerttemberg.de/de/fde.asp?page=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| 16280167 VIP website status:...

118go.com IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-174081 Description| Value ---|--- Affected Website:| 118go.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Iframe Injection / CWE-79 CVSSv3 Score:| 6.1...

colorado.edu IFRAME Injection vulnerability

Vulnerable URL: http://www.colorado.edu/eventscalendar/cgi-bin/frame.cgi?parent=viewURL=https://www.openbugbounty.org" name="bottom" frameborder="no" marginwidth="0" marginheight="0" Details: Description| Value ---|--- Patched:| Yes, at 27.08.2016 Latest check for patch:| 27.08.2016 08:17 GMT...

yellowpages.com.vn IFRAME Injection vulnerability

Vulnerable URL: http://www.yellowpages.com.vn/homepages.php?url=www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| 1752205 VIP website status:| No...

Microsoft Internet Explorer Local Filename Information Disclosure Vulnerability

Internet Explorer is a web browser from Microsoft. Microsoft Internet Explorer has different feedback in the file:// URL for existing and non-existing files, and if used in conjunction with an HTML5 sandbox iframe, a local attacker could exploit this vulnerability to obtain local file existence...

CVE-2016-3321

Microsoft Internet Explorer 10 and 11 load different files for attempts to open a file:// URL depending on whether the file exists, which allows local users to enumerate files via vectors involving a file:// URL and an HTML5 sandbox iframe, aka "Internet Explorer Information Disclosure...

egitimcafe.com IFRAME Injection vulnerability

Vulnerable URL: http://egitimcafe.com/redirector.php?url=http://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| 3580765 VIP website status:| No...

CVE-2016-1474

Cisco Prime Infrastructure 2.22 does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting XFS" issue, aka Bug ID CSCuw65846, a different...

CVE-2016-1474

Cisco Prime Infrastructure 2.22 does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting XFS" issue, aka Bug ID CSCuw65846, a different...

DEBIAN-CVE-2016-5262

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler attributes of a MARQUEE element within a sandboxed IFRAME element that lacks the sandbox="allow-scripts" attribute value, which makes it easier for remote attackers to conduct cross-site scripting XSS...

CVE-2016-5262

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler attributes of a MARQUEE element within a sandboxed IFRAME element that lacks the sandbox="allow-scripts" attribute value, which makes it easier for remote attackers to conduct cross-site scripting XSS...

CVE-2016-5262

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler attributes of a MARQUEE element within a sandboxed IFRAME element that lacks the sandbox="allow-scripts" attribute value, which makes it easier for remote attackers to conduct cross-site scripting XSS...

Cisco Prime Infrastructure Cross-Frame Scripting Vulnerability

A vulnerability in the web interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to execute a cross-frame scripting XFS attack. This vulnerability is due to insufficient HTML iframe protection. An attacker could exploit this vulnerability by directing a user to a...

molotow.com XSS vulnerability

Vulnerable URL: http://www.molotow.com/typo3conf/ext/slmolotowproducts/iframe.php?h="=x Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 23:08 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 522903 VIP website...