CVE-2013-2318

Published: Jun 6, 2013Modified: Apr 29, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:P/I:N/A:N

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

The Content Provider in the MovatwiTouch application before 1.793 and MovatwiTouch Paid application before 1.793 for Android does not properly restrict access to authorization information, which allows attackers to hijack Twitter accounts via a crafted application.

Affected (2)

Products: Jig: Movatwitouch, Movatwitouch Paid

2 products

Movatwitouch Paid

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Jig Movatwitouch	version ≤ 1.792
Jig Movatwitouch Paid	version ≤ 1.792

Related CWEs

References (6)

http://jvn.jp/en/jp/JVN90289505/index.html

Source: vultures@jpcert.or.jp

http://jvndb.jvn.jp/jvndb/JVNDB-2013-000047

Source: vultures@jpcert.or.jp

http://movatwitter.jugem.jp/?eid=442

Source: vultures@jpcert.or.jp

http://jvn.jp/en/jp/JVN90289505/index.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://jvndb.jvn.jp/jvndb/JVNDB-2013-000047

Source: af854a3a-2127-422b-91ae-364da2661108

http://movatwitter.jugem.jp/?eid=442

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.