Cross-site scripting (XSS) vulnerability in China Mobile 139 Mailbox IOS V2.8.2

139 Mailbox APP is a general-purpose mailbox client launched by China Mobile. A cross-site scripting XSS vulnerability exists in China Mobile 139 Mailbox IOS V2.8.2. An attacker exploiting the vulnerability can insert malicious js code into the page to obtain user cookies and other information,...

Cross-site scripting (XSS) vulnerability in China Mobile 139 Mailbox Android V6.6.1

139 Mailbox APP is a general-purpose mailbox client launched by China Mobile. A cross-site scripting XSS vulnerability exists in China Mobile 139 Mailbox Android V6.6.1. An attacker exploiting the vulnerability can insert malicious js code into the page to obtain user cookies and other informatio...

Cross-site scripting (XSS) vulnerability in China Mobile 139 Mailbox PC V2.5.1

139 Mailbox for PC is a general-purpose mailbox client launched by China Mobile. A cross-site scripting XSS vulnerability exists in China Mobile 139 Mailbox PC V2.5.1. An attacker exploiting the vulnerability can insert malicious js code into the page to obtain user cookies and other information,...

China Mobile 139 Mailbox Android V6.6.1 suffers from gesture password plaintext storage vulnerability

139 Mailbox APP is a general-purpose mailbox client launched by China Mobile. A vulnerability exists in the plaintext storage of gesture passwords in China Mobile 139 Mailbox Android V6.6.1. Since the user's gesture password storage is not encrypted, an attacker can utilize the vulnerability to...