PT-2014-4315

Name of the Vulnerable Software and Affected Versions iThoughtsHD app version 4.19 Description The issue is related to a cross-site scripting XSS vulnerability. It occurs when the WiFi Transfer feature is used, allowing remote attackers to inject arbitrary web script or HTML via a crafted map nam...

PT-2014-4316

Name of the Vulnerable Software and Affected Versions iThoughtsHD app version 4.19 Description The issue allows remote attackers to upload arbitrary files by exploiting the WiFi Transfer feature. This is achieved by placing a %00 sequence after a dangerous extension, as demonstrated by a...

CVE-2014-1827: Improper Input Validation

The iThoughtsHD app 4.19 for iOS on iPad devices, when the WiFi Transfer feature is used, allows remote attackers to upload arbitrary files by placing a %00 sequence after a dangerous extension, as demonstrated by a .html%00.txt file...

eFile Wifi Transfer Manager 1.0 - Multiple Vulnerabilities

eFile Wifi Transfer Manager 1.0 - Multiple Vulnerabilities Title: ====== eFile Wifi Transfer Manager 1.0 iOS - Multiple Vulnerabilities Date: ===== 2013-06-24 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=982 VL-ID: ===== 982 Common Vulnerability Scoring System:...

Transferable Remote 1.1 XSS / LFI / Command Injection

Title: ====== Transferable Remote v1.1 iPad iPhone - Multiple Web Vulnerabilities Date: ===== 2013-02-09 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=863 VL-ID: ===== 863 Common Vulnerability Scoring System: ==================================== 8.5 Introduction:...

OPlayer 2.0.05 iPhone,iPod TC & iPad - Web Vulnerabilities

Document Title: =============== OPlayer 2.0.05 iPhone,iPod TC & iPad - Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=713 Release Date: ============= 2012-10-02 Vulnerability Laboratory ID VL-ID: ====================================...