Vivalines Turizm - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Vivalines Turizm published at the 'play' market has multiple vulnerabilities...

turizm.ru Open Redirect vulnerability

Vulnerable URL: http://www.turizm.ru/cgi-bin/go.pl?url=www.openbugbounty.org" Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check for patch:| 24.11.2017 22:50 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 55456 VIP website...

minsk.turizm.ru XSS vulnerability

Vulnerable URL: http://minsk.turizm.ru/"';--/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website status:| No Check minsk.turizm....

tolyatti.turizm.ru XSS vulnerability

Vulnerable URL: http://tolyatti.turizm.ru/"';--/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website status:| No Check...

rostov.turizm.ru XSS vulnerability

Vulnerable URL: http://rostov.turizm.ru/"';--/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website status:| No Check...

stavropol.turizm.ru XSS vulnerability

Vulnerable URL: http://stavropol.turizm.ru/"';--/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website status:| No Check...

tyumen.turizm.ru XSS vulnerability

Vulnerable URL: http://tyumen.turizm.ru/"';--/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 0 VIP website status:| No Check...