Thinfinity Iframe Injection Detection

A vulnerability exists in Thinfinity VirtualUI in a function located in /lab.html reachable which by default could allow IFRAME injection via the "vpath" parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability exists in Thinfinity VirtualUI in a function located in /lab.""" import...

CVE-2021-45092

Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath parameter...

CVE-2021-45092

Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath parameter...

PT-2021-24203

Name of the Vulnerable Software and Affected Versions: Thinfinity VirtualUI versions prior to 3.0 Description: The issue concerns functionality in the /lab.html endpoint that is reachable by default, allowing potential IFRAME injection via the vpath parameter. Recommendations: For versions prior ...

CVE-2021-45092: Undefined Security Weakness

Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath parameter...

Cybele Software Thinfinity VirtualUI security vulnerability

Cybele Software Thinfinity VirtualUI is a solution from Cybele Software that supports embedding remote Windows applications into standard Web applications, allowing two-way interaction with Javascript programming. A security vulnerability exists in Cybele Software Thinfinity VirtualUI versions...