Fashion Style - Certificates or keys found, Dynamic Code Loading, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Fashion Style published at the 'play' market has multiple vulnerabilities...

Session fixation

The Fashion Style aka com.thirtysixyougames.google.starGirlSingapore application 3.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5717

The Fashion Style aka com.thirtysixyougames.google.starGirlSingapore application 3.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5717

CVE-2014-5717 affects The Fashion Style Android app (package com.thirtysixyougames.google.starGirlSingapore) version 3.4.1. The issue is that the app does not verify X.509 certificates from SSL servers, allowing MITM attackers to spoof servers and obtain sensitive information via crafted certific...

CVE-2014-5717: Undefined Security Weakness

The Fashion Style aka com.thirtysixyougames.google.starGirlSingapore application 3.4.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...