ВТБ24-Онлайн - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application ВТБ24-Онлайн published at the 'play' market has multiple vulnerabilities...

vtb24.ru XSS vulnerability

Vulnerable URL: http://www.vtb24.ru/Pages/default.aspx/EN Details: Description| Value ---|--- Patched:| Yes, at 01.08.2016 Latest check for patch:| 01.08.2016 15:27 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3290 VIP website status:| Yes Check vtb24.ru SSL...