Good for Enterprise for iOS CVE-2013-5118 HTML Injection Vulnerability
BID:62627
Info
Good for Enterprise for iOS CVE-2013-5118 HTML Injection Vulnerability
| Bugtraq ID: | 62627 |
| Class: | Input Validation Error |
| CVE: |
CVE-2013-5118 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 24 2013 12:00AM |
| Updated: | Sep 24 2013 12:00AM |
| Credit: | Mario Robles |
| Vulnerable: |
Good Technology Good for Enterprise for iOS 2.2.2.1611 |
| Not Vulnerable: |
Good Technology Good for Enterprise for iOS 2.2.4.1659 |
Discussion
Exploit / POC
Good for Enterprise for iOS CVE-2013-5118 HTML Injection Vulnerability
An attacker can exploit this issue using a web browser.
The following example data is available:
<body><div><script>alert("XSS Here");</script></div></body>
An attacker can exploit this issue using a web browser.
The following example data is available:
<body><div><script>alert("XSS Here");</script></div></body>
Solution / Fix
Good for Enterprise for iOS CVE-2013-5118 HTML Injection Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Good for Enterprise for iOS CVE-2013-5118 HTML Injection Vulnerability
References:
References:
- CVE-2013-5118 - XSS Good for Enterprise iOS (Bugtraq)
- Good for Enterprise Homepage (Good Technology)
- XSS Vulnerability in the application "Good for Enterprise" for iOS (Mario Robles)