CVE-2012-5185

CVE-2012-5185 affects Olive Toast Documents Pro (formerly Files HD) on iOS, prior to version 1.11.1, via a directory traversal vulnerability that lets a guest user read or delete files. Root cause is improper path handling exposing file system access. Affected product versions: Documents Pro/File...

CVE-2012-5184

Documents Pro (Olive Toast Software Ltd) for iOS is affected by a Cross-site scripting (XSS) vulnerability in the file viewer prior to version 1.11.1. The issue allows an attacker to inject arbitrary web script or HTML via unspecified vectors when the app is used through a web browser, potentiall...