nude-gals.com IFRAME Injection vulnerability

Vulnerable URL: https://www.nude-gals.com/search.php?word= XANY =1=00==00=advm Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 16:37 GMT Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| 40845 VIP websi...

telecontact.ma IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-265698 Description| Value ---|--- Affected Website:| telecontact.ma Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Iframe Injection / CWE-79 CVSSv3 Score:| 6.1...

businesstoday.in IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-265613 Description| Value ---|--- Affected Website:| businesstoday.in Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

Cisco Patches Another Critical Ormandy Bug in WebEx Extension

Cisco has provided updates today for WebEx browser extensions for Chrome and Firefox after Google Project Zero researcher Tavis Ormandy and Divergent Security’s Cris Neckar privately disclosed a vulnerability that could be abused to remotely run code on a computer running the browser extension...

webtools.smumn.edu IFRAME Injection vulnerability

Vulnerable URL: https://webtools.smumn.edu/gpde/WEBCOWEBFORM.CFM?formid=" XANY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 23.08.2017 Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

nationalrail.co.uk IFRAME Injection vulnerability

Vulnerable URL: http://www.nationalrail.co.uk/servicedisruptions/currentAndFuture.aspx?TravelDate=" xany Details: Description| Value ---|--- Patched:| No Latest check for patch:| 17.08.2017 Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| 4759 VIP websit...

panasonic.com XSS vulnerability

Open Bug Bounty ID: OBB-264936 Description| Value ---|--- Affected Website:| panasonic.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

sacc.to IFRAME Injection vulnerability

Vulnerable URL: http://www.sacc.to/cgi/common/redirect.asp?site=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.10.2017 Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| 17781040 VIP website...

senatour.avablog.ir IFRAME Injection vulnerability

Vulnerable URL: http://senatour.avablog.ir/gotolink/openbugbounty.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 05.10.2017 Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

controlsformotion.com IFRAME Injection vulnerability

Vulnerable URL: http://www.controlsformotion.com/iframelinks.aspx?link=openbugbounty.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 05.10.2017 Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

CVE-2017-11195

Pulse Connect Secure 8.3R1 has Reflected XSS in launchHelp.cgi. The helpLaunchPage parameter is reflected in an IFRAME element, if the value contains two quotes. It properly sanitizes quotes and tags, so one cannot simply close the src with a quote and inject after that. However, an attacker can...

Cross site scripting

Pulse Connect Secure 8.3R1 has Reflected XSS in launchHelp.cgi. The helpLaunchPage parameter is reflected in an IFRAME element, if the value contains two quotes. It properly sanitizes quotes and tags, so one cannot simply close the src with a quote and inject after that. However, an attacker can...

CVE-2017-11195

Pulse Connect Secure 8.3R1 has Reflected XSS in launchHelp.cgi. The helpLaunchPage parameter is reflected in an IFRAME element, if the value contains two quotes. It properly sanitizes quotes and tags, so one cannot simply close the src with a quote and inject after that. However, an attacker can...

PT-2017-11814

Name of the Vulnerable Software and Affected Versions Pulse Connect Secure version 8.3R1 Description The issue concerns a Reflected XSS in the launchHelp.cgi component. Specifically, the helpLaunchPage parameter is reflected in an IFRAME element. If the value of this parameter contains two quotes...

bullguard.com IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-262325 Description| Value ---|--- Affected Website:| bullguard.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Iframe Injection / CWE-79 CVSSv3 Score:| 6.1...

molex.com IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-260610 Description| Value ---|--- Affected Website:| molex.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Iframe Injection / CWE-79 CVSSv3 Score:| 6.1...

thepiratebay.org IFRAME Injection vulnerability

Vulnerable URL: https://thepiratebay.org/ads/middle/index.php?r=24=bar=Countrywise.S07E04.XviD-AFG=michal:"' XANY Details: Description| Value ---|--- Patched:| Yes, at 26.10.2017 Latest check for patch:| 26.10.2017 10:42 GMT Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly...

onlinewebfonts.com IFRAME Injection vulnerability

Vulnerable URL: https://www.onlinewebfonts.com/search?q=" XANY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| 87551 VIP website status:| Yes Check onlinewebfonts.com S...

download.pmi.it IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-254985 Description| Value ---|--- Affected Website:| download.pmi.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Iframe Injection / CWE-79 CVSSv3 Score:| 6.1...

inia.gob.es IFRAME Injection vulnerability

Vulnerable URL: http://www.inia.gob.es/IniaPortal/goUrlDinamica.action?url=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 10.08.2017 Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| 11557901 VIP...