Souq.com - Customized SSL, Exported ContentProvider, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Souq.com published at the 'play' market has multiple vulnerabilities...

Souq.com: reflected xss on search bar (uae.souq.com)

the xss is executed in android phone or you can download user-agent switcher for google chrome then click Current: Android Handset to reproduce this bug as you see in pic 2.PNG steps: 1 go to http://uae.souq.com 2 put this payload on search bar : xss'+alert1+' 3the payload xss is executed 4 this...

Unfixed XSS vulnerability at www.souq.com

Security researcher cueballr, has submitted on 17/04/2008 a cross-site-scripting XSS vulnerability affecting www.souq.com, which at the time of submission ranked 14368 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/04/2008. It is currently...