Filtered by vendor Newphoria Corporation Subscriptions
Filtered by product Applican Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2015-7772 1 Newphoria Corporation 1 Applican 2024-11-21 N/A
Cross-site scripting (XSS) vulnerability in the runtime engine in the Newphoria applican framework before 1.13.0 for Android and iOS allows remote attackers to inject arbitrary web script or HTML via a crafted URL that triggers WebView anchor attachment in an applican application, a different vulnerability than CVE-2015-7771.
CVE-2015-7771 1 Newphoria Corporation 1 Applican 2024-11-21 N/A
Cross-site scripting (XSS) vulnerability in the runtime engine in the Newphoria applican framework before 1.13.0 for Android and iOS allows remote attackers to inject arbitrary web script or HTML via a crafted SSID that is encountered by an applican application, a different vulnerability than CVE-2015-7772.
CVE-2015-5632 1 Newphoria Corporation 1 Applican 2024-11-21 N/A
The runtime engine in the Newphoria applican framework before 1.12.3 for Android and before 1.12.2 for iOS allows attackers to bypass a whitelist.xml URL whitelist protection mechanism and obtain API access via unspecified vectors.