AirDroid web interface XSS Vulnerability

Release date: 2013-03-21
Updated on: 2013-04-12

Affected Systems:
AirDroid
Description:
--------------------------------------------------------------------------------
CVE (CAN) ID: CVE-2013-0134
 
AirDroid is a remote mobile phone management software.
 
The AirDroid Web interface has the cross-site scripting vulnerability. Remote attackers can exploit this vulnerability to inject arbitrary Web scripts or HTML messages through specially crafted text messages.
 
<* Source: Derek Higgins

Link: http://www.kb.cert.org/vuls/id/557252
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
AirDroid
--------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
 
Http://airdroid.com/