New Years live wallpaper 2016 - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application New Years live wallpaper 2016 published at the 'play' market has multiple vulnerabilities...

tour.mk.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-143796 Description| Value ---|--- Affected Website:| tour.mk.co.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

raythea.mk.co.kr XSS vulnerability

Open Bug Bounty ID: OBB-143794 Description| Value ---|--- Affected Website:| raythea.mk.co.kr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

tiempo.com XSS vulnerability

Open Bug Bounty ID: OBB-143262 Description| Value ---|--- Affected Website:| tiempo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

scotsman.com XSS vulnerability

Open Bug Bounty ID: OBB-142764 Description| Value ---|--- Affected Website:| scotsman.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

thetaxinstitute.com XSS vulnerability

Open Bug Bounty ID: OBB-141368 Description| Value ---|--- Affected Website:| thetaxinstitute.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

trinidadexpress.com XSS vulnerability

Open Bug Bounty ID: OBB-140877 Description| Value ---|--- Affected Website:| trinidadexpress.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

zsbojano.pl XSS vulnerability

Open Bug Bounty ID: OBB-140514 Description| Value ---|--- Affected Website:| zsbojano.pl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

jp.zinio.com XSS vulnerability

Open Bug Bounty ID: OBB-140137 Description| Value ---|--- Affected Website:| jp.zinio.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

no.zinio.com XSS vulnerability

Open Bug Bounty ID: OBB-140136 Description| Value ---|--- Affected Website:| no.zinio.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

dnainfo.com XSS vulnerability

Open Bug Bounty ID: OBB-137446 Description| Value ---|--- Affected Website:| dnainfo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

wordplays.com XSS vulnerability

Open Bug Bounty ID: OBB-136266 Description| Value ---|--- Affected Website:| wordplays.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

youschools.org XSS vulnerability

Open Bug Bounty ID: OBB-135760 Description| Value ---|--- Affected Website:| youschools.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

ukap.org.uk XSS vulnerability

Open Bug Bounty ID: OBB-135633 Description| Value ---|--- Affected Website:| ukap.org.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

lists.gnu.org XSS vulnerability

Open Bug Bounty ID: OBB-135497 Description| Value ---|--- Affected Website:| lists.gnu.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

awoiaf.westeros.org XSS vulnerability

Open Bug Bounty ID: OBB-133567 Description| Value ---|--- Affected Website:| awoiaf.westeros.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

prom.pnzreg.ru XSS vulnerability

Open Bug Bounty ID: OBB-133146 Description| Value ---|--- Affected Website:| prom.pnzreg.ru Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

tochka-na-karte.ru XSS vulnerability

Open Bug Bounty ID: OBB-132363 Description| Value ---|--- Affected Website:| tochka-na-karte.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

fxstreet.es XSS vulnerability

Open Bug Bounty ID: OBB-130598 Description| Value ---|--- Affected Website:| fxstreet.es Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mcleodumc.org XSS vulnerability

Open Bug Bounty ID: OBB-130589 Description| Value ---|--- Affected Website:| mcleodumc.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...