Blood Glucose Detector Prank - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Blood Glucose Detector Prank published at the 'play' market has multiple vulnerabilities...

Glucose Meter Prank - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Glucose Meter Prank published at the 'play' market has multiple vulnerabilities...

CVE-2012-0313

Cross-site scripting XSS vulnerability in glucose 2 before stage 6.2 allows remote attackers to inject arbitrary web script or HTML via an RSS feed...

Cross site scripting

Cross-site scripting XSS vulnerability in glucose 2 before stage 6.2 allows remote attackers to inject arbitrary web script or HTML via an RSS feed...

CVE-2012-0313

CVE-2012-0313 concerns glucose 2 prior to stage 6.2, with an XSS vulnerability that lets remote attackers inject arbitrary scripts via the RSS feed. The issue stems from improper processing of RSS feed output, enabling arbitrary script execution on the affected system. Connected sources identify ...

CVE-2012-0313

Cross-site scripting XSS vulnerability in glucose 2 before stage 6.2 allows remote attackers to inject arbitrary web script or HTML via an RSS feed...

glucose 2 vulnerable to arbitrary script execution

Overview glucose 2 is vulnerable to arbitrary script execution. glucose 2 is an RSS reader. glucose 2 is vulnerable to arbitrary script execution which is inserted in RSS feed, due to the improper processing of RSS feed output. Daiki Fukumori of Cyber Defense Institute, Inc. reported this...

JVN#65869891: glucose 2 vulnerable to arbitrary script execution

glucose 2 is an RSS reader. glucose 2 is vulnerable to arbitrary script execution which is inserted in RSS feed, due to the improper processing of RSS feed output. Impact An arbitrary script may be executed on the vulnerable system. Solution Update the software Update to the latest version...