Who Is The Killer? Episode I - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Who Is The Killer? Episode I published at the 'play' market has multiple vulnerabilities...

PT-2014-7700

Name of the Vulnerable Software and Affected Versions Who-is-it? Lite name caller time limited free aka de.profiler.android.whoisit version 1.0 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the...

Family Connections Who is Chatting Add-On Remote File Inclusion Vulnerability

No description provided by source. ======================================================= Who is Chatting 2.2.3 Remote File Include Vulnerability ======================================================= Author : lumut-- Script Details : http://www.familycms.com/downloads/details.php?file=50 Bugs ...

CVE-2010-4988

CVE-2010-4988 describes a PHP remote file inclusion vulnerability in Family Connections Who is Chatting 2.2.3, specifically in mod_chatting/themes/default/header.php where TMPL[path] can be controlled to include remote PHP code. The underlying issue enables an attacker to execute arbitrary PHP vi...

PT-2011-1923

Name of the Vulnerable Software and Affected Versions Family Connections Who is Chatting version 2.2.3 Description A remote file inclusion issue exists in the mod chatting/themes/default/header.php file, allowing remote attackers to execute arbitrary PHP code via a URL in the TMPLpath parameter...

CVE-2010-4988: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in modchatting/themes/default/header.php in Family Connections Who is Chatting 2.2.3 allows remote attackers to execute arbitrary PHP code via a URL in the TMPLpath parameter...