Datashahr Social network android application login bypass

CVE	Category	Price	Severity
CVE-2021-33162	CWE-287	Not disclosed	High

Author	Risk	Exploitation Type	Date
Sina Yazdanmehr	High	Remote	2018-04-25

CPE
cpe:cpe:2.3:a:datashahr:social_network_android_application::::::::

Our sensors found this exploit at: https://cxsecurity.com/ascii/WLB-2018040198

Below is a copy:

Datashahr Social network android application login bypass

Tested on= Android
Version= 2.4.0 and 2.9.1 (Last version)

Description:
The site of DataShahr with over 100,000 registered locations and smart search is the best way to find local services. The spatial data recorded in the data warehouse is not specific to Tehran and includes all of Iran.
An unauthorized person can manipulate and get the verification code that send to any mobile number.


Website: https://datashahr.com/

This information is provided for TESTING and LEGAL RESEARCH purposes only.
All trademarks used are properties of their respective owners. By visiting this website you agree to Terms of Use and Privacy Policy and Impressum