Big Bus Tours - City Guide - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Big Bus Tours - City Guide published at the 'play' market has multiple vulnerabilities...

copenhagen.foodtours.eu XSS vulnerability

Vulnerable URL: http://copenhagen.foodtours.eu/wp-admin/admin-ajax.php?action=revsliderajaxactionaction= Derp Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 14:02 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

CVE-2014-6923

The Dubrovnik Guided Walking Tours aka com.mytoursapp.android.app351 application 1.3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Dubrovnik Guided Walking Tours aka com.mytoursapp.android.app351 application 1.3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6923

The CVE-2014-6923 entries concern the Dubrovnik Guided Walking Tours Android app (com.mytoursapp.android.app351) version 1.3.2. Affected component: network security logic where the app does not verify X.509 certificates from SSL servers. Root cause: missing/incorrect certificate validation allows...

CVE-2014-6923

The Dubrovnik Guided Walking Tours aka com.mytoursapp.android.app351 application 1.3.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6782

The Abraham Tours aka com.mytoursapp.android.app432 application 1.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Abraham Tours aka com.mytoursapp.android.app432 application 1.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6782

The Abraham Tours aka com.mytoursapp.android.app432 application 1.1.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6782

The CVE-2014-6782 entry affects the Android app Abraham Tours (com.mytoursapp.android.app432), version 1.1.2, noting that it does not verify X.509 certificates from SSL servers. This enables man-in-the-middle attackers to spoof legitimate servers and extract sensitive data via a crafted certifica...

Tours Manager 1.0 - (cityview.php cityid) SQL Injection Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= IN THE NAME OF ALLAH -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Tour...

HP LoadRunner Web Tours DoS

No description provided...

[security bulletin] HPSBMA02533 SSRT080049 rev.1 - HP LoadRunner Web Tours 9.10 Remote Denial of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02165172 Version: 1 HPSBMA02533 SSRT080049 rev.1 - HP LoadRunner Web Tours 9.10 Remote Denial of Service NOTICE: The information in this Security Bulletin should be acted upon as soon as possible...

CVE-2010-4028

Unspecified vulnerability in LoadRunner Web Tours 9.10 in HP LoadRunner 9.1 and earlier allows remote attackers to cause a denial of service, and possibly obtain sensitive information or modify data, via unknown vectors...

Code injection

Unspecified vulnerability in LoadRunner Web Tours 9.10 in HP LoadRunner 9.1 and earlier allows remote attackers to cause a denial of service, and possibly obtain sensitive information or modify data, via unknown vectors...

CVE-2010-4028

Unspecified vulnerability in LoadRunner Web Tours 9.10 in HP LoadRunner 9.1 and earlier allows remote attackers to cause a denial of service, and possibly obtain sensitive information or modify data, via unknown vectors...

CVE-2008-6289

SQL injection vulnerability in cityview.php in Tours Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the cityid parameter...

Sql injection

SQL injection vulnerability in cityview.php in Tours Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the cityid parameter...

CVE-2008-6289

SQL injection vulnerability in cityview.php in Tours Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the cityid parameter...

CVE-2008-6289

The CVE identifies an SQL injection in cityview.php of Tours Manager 1.0, exploitable via the cityid parameter. Affected component/function is cityview.php; underlying issue is improper input handling allowing arbitrary SQL execution. The primary sources (NVD/NVD-linked records) confirm remote ex...