Lucene search
K

5 matches found

Huntr
Huntr
added 2021/08/23 8:10 a.m.6 views

Cross-site Scripting (XSS) - Reflected in erikdubbelboer/phpredisadmin

✍️ Description The application is vulnerable to XFS attack. 🕵️‍♂️ Proof of Concept Navigate to https://domain.tld/phpRedisAdmin/?https://www.eia.gov/state/maps The page https://www.eia.gov/state/maps.php will be loaded in an iframe on the page. 💥 Impact Cross-Frame Scripting XFS is an attack that...

0.8AI score
Exploits0References1
Cisco
Cisco
added 2019/09/18 4:0 p.m.37 views

Cisco HyperFlex Software Cross-Frame Scripting Vulnerability

A vulnerability in the web-based interface of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to execute a cross-frame scripting XFS attack on an affected device. This vulnerability is due to insufficient HTML iframe protection. An attacker could exploit this vulnerabilit...

6.5CVSS0.8AI score0.00399EPSS
Exploits0References1
Prion
Prion
added 2017/10/05 7:29 a.m.13 views

Cross site scripting

A vulnerability in the web-based UI of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to execute a cross-frame scripting XFS attack. The vulnerability exists because the affected software does not provide sufficient protections for HTML inline frames iframes...

4.3CVSS6.2AI score0.0257EPSS
Exploits0References3
Cisco
Cisco
added 2017/10/04 4:0 p.m.68 views

Cisco Unified Communications Manager Cross-Frame Scripting Vulnerability

A vulnerability in the web-based UI of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to execute a cross-frame scripting XFS attack. The vulnerability exists because the affected software does not provide sufficient protections for HTML inline frames iframes...

4.7CVSS6.3AI score0.0257EPSS
Exploits0References1
Cisco
Cisco
added 2016/01/05 7:30 a.m.33 views

Cisco Prime Infrastructure Frame Injection Vulnerability

A vulnerability in the web interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to execute a cross-frame scripting XFS attack. The vulnerability is due to insufficient HTML iframe protection. An attacker could exploit this vulnerability by directing a user to an...

4.3CVSS5AI score0.00243EPSS
Exploits0References1
Rows per page
Query Builder