Football Live Scores GoalAlert - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Football Live Scores GoalAlert published at the 'play' market has multiple vulnerabilities...

KICK: Football Card Trader - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application KICK: Football Card Trader published at the 'play' market has multiple vulnerabilities...

adidas World Football Live WP - Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application adidas World Football Live WP published at the 'play' market has multiple vulnerabilities...

Football Transfers & Rumors - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Football Transfers & Rumors published at the 'play' market has multiple vulnerabilities...

433 | Football - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application 433 | Football published at the 'play' market has multiple vulnerabilities...

Yahoo Football - كرة قدم - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Yahoo Football - كرة قدم published at the 'play' market has multiple vulnerabilities...

vintagefootballshirts.com XSS vulnerability

Vulnerable URL: http://www.vintagefootballshirts.com/search/?search=%22%3E%3Cscript%3Ealert%28/XSSPOSED/%29%3B%3C/script%3E=22=14 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

CVE-2014-4586

Multiple cross-site scripting XSS vulnerabilities in the wp-football plugin 1.1 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the league parameter to 1 footballclassification.php, 2 footballcriteria.php, 3 templates/templatedefaultpreview.php, or 4...

CVE-2014-4586

The CVE-2014-4586 entry refers to multiple XSS vulnerabilities in the wp-football WordPress plugin (versions 1.1 and earlier). The issues allow remote attackers to inject arbitrary web script or HTML via parameters in several scripts: league in football_classification.php, football_criteria.php, ...

CVE-2014-4586

Multiple cross-site scripting XSS vulnerabilities in the wp-football plugin 1.1 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the league parameter to 1 footballclassification.php, 2 footballcriteria.php, 3 templates/templatedefaultpreview.php, or 4...

PT-2014-6000

Name of the Vulnerable Software and Affected Versions wp-football plugin version 1.1 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via several parameters and files, including the league parameter to files such as "football...

CVE-2014-4586: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the wp-football plugin 1.1 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the league parameter to 1 footballclassification.php, 2 footballcriteria.php, 3 templates/templatedefaultpreview.php, or 4...

CVE-2014-7773

The Cleveland Football STREAM aka com.appstronautme.clevelandfootballstream application 2.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Command injection

The Cleveland Football STREAM aka com.appstronautme.clevelandfootballstream application 2.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7786

The English Football Magazine aka com.magzter.englishfootball application 3.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7786

CVE-2014-7786 affects the Android app English Football Magazine (com.magzter.englishfootball) version 3.0. The vulnerability is improper SSL certificate validation: the app does not verify X.509 certificates from SSL servers, enabling potential man‑in‑the‑middle attackers to spoof servers and obt...

CVE-2014-7773

The CVE-2014-7773 entry concerns the Android app Cleveland Football STREAM (com.appstronautme.clevelandfootballstream) version 2.1.0. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive i...

PT-2014-8258

Name of the Vulnerable Software and Affected Versions Cleveland Football STREAM aka com.appstronautme.clevelandfootballstream version 2.1.0 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application...

CVE-2014-7773: Undefined Security Weakness

The Cleveland Football STREAM aka com.appstronautme.clevelandfootballstream application 2.1.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-8271

Name of the Vulnerable Software and Affected Versions The English Football Magazine aka com.magzter.englishfootball application version 3.0 for Android Description The application does not verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and...