EUVD-2015-2835

Malware in sbrugna...

Firefox OS XSS

The vulnerability of the Gaia Search app for the Firefox OS operating system exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary HTML code through a special search request executed after the browser...

Firefox OS XSS

The vulnerability of the Gaia Search app for the Firefox OS operating system exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary HTML code by manipulating the title and search engine field of...

CVE-2015-2745: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Search app in Gaia in Mozilla Firefox OS before 2.2 allow remote attackers to inject arbitrary HTML via the 1 name or 2 title field in card content associated with a search link that is mishandled after a HOME button press or a Show Windows...

PT-2015-1848

Name of the Vulnerable Software and Affected Versions Mozilla Firefox OS versions prior to 2.2 Description The issue allows remote attackers to inject arbitrary HTML via the name or title field in card content associated with a search link that is mishandled after a HOME button press or a Show...