CVE-2013-2318

The Content Provider in the MovatwiTouch application before 1.793 and MovatwiTouch Paid application before 1.793 for Android does not properly restrict access to authorization information, which allows attackers to hijack Twitter accounts via a crafted application...

CVE-2013-2318

CVE-2013-2318 affects MovatwiTouch for Android (before v1.793) and MovatwiTouch Paid (before v1.793). The Content Provider fails to restrict access to authorization information, enabling a crafted Android application to hijack a user’s Twitter account by abusing the permission exposure. The issue...