CVE-2013-5725

The Metaclassy Byword app 2.x before 2.1 for iOS does not require confirmation of Replace file actions, which allows remote attackers to overwrite arbitrary files via the name and text parameters in a byword://replace URL...

PT-2013-5757

Name of the Vulnerable Software and Affected Versions Metaclassy Byword app versions 2.0 through 2.1 Description The issue allows remote attackers to overwrite arbitrary files. This is achieved via the name and text parameters in a "byword://replace" URL, as the app does not require confirmation ...

CVE-2013-5725: Undefined Security Weakness

The Metaclassy Byword app 2.x before 2.1 for iOS does not require confirmation of Replace file actions, which allows remote attackers to overwrite arbitrary files via the name and text parameters in a byword://replace URL...