Работа, вакансии на Superjob - Customized SSL, Dangerous filesystem permissions, Hardcoded secrets vulnerabilities

HackApp vulnerability scanner discovered that application Работа, вакансии на Superjob published at the 'play' market has multiple vulnerabilities...

superjob.ru XSS vulnerability

Vulnerable URL: https://www.superjob.ru/registration.html?ref=%00';alert/OPENBUGBOUNTY/;%0Avar x=' Details: Description| Value ---|--- Patched:| Yes, at 28.07.2017 Latest check for patch:| 28.07.2017 12:33 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3411 VIP...

superjob.ru XSS vulnerability

Vulnerable URL: http://www.superjob.ru/vacancy/search/?keywords0keys=xss=0=&pay1;=&pay0;=0=0ofwork=0ofwork=0==0=0=0=0&lang0;=0=0=0=0search=1"=1=1=1 Details: Description| Value ---|--- Patched:| Yes, at 25.09.2016 Latest check for patch:| 25.09.2016 06:52 GMT Vulnerability type:| XSS Vulnerability...