26 matches found
IBM Security Access Manager Information Disclosure Vulnerability (CNVD-2014-09194)
IBM Security Access Manager software is a highly scalable user authentication, authorization and Web SSO solution for implementing security policies on a variety of Web and application resources, centralized management of online portals. An information disclosure vulnerability exists in IBM...
Mavenlink: Clickjacking
Hi, You have no implementation of Clickjacking attacks on your mobile version. I have set up a user agent switcher and tried to support my claim with regards to the mobile website. For proof of concept: For mitigation, you may want to add the HTTP header XFRAMEOPTIONS and set it to DENY. Attached...
http-mobileversion-checker NSE Script
Checks if the website holds a mobile version. See also: http-useragent-tester.nse Script Arguments newtargets If this is set, add any newly discovered hosts to nmap scanning queue. Default: nil httpspider.doscraping, httpspider.maxdepth, httpspider.maxpagecount, httpspider.noblacklist,...
Cross site scripting
Cross-site scripting XSS vulnerability in the management screen in OpenPNE 3.4.x before 3.4.21.1, 3.6.x before 3.6.9.1, and 3.8.x before 3.8.5.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving the "mobile version color scheme."...
CVE-2013-2309
Cross-site scripting XSS vulnerability in the management screen in OpenPNE 3.4.x before 3.4.21.1, 3.6.x before 3.6.9.1, and 3.8.x before 3.8.5.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving the "mobile version color scheme."...
