CVE-2014-1886

Published: Mar 3, 2014Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

The Edinburgh by Bus application for Android, when Adobe PhoneGap 2.9.0 or earlier is used, allows remote attackers to execute arbitrary JavaScript code, and consequently access external-storage resources, by leveraging control over one of a number of "obscure Eastern European dating sites."

Affected (1)

Products: Edinburghtour: Edinburgh By Bus

Edinburghtour

1 product

Edinburgh By Bus

Configuration A

1 vulnerable · 21 platform

Vulnerable Software	Affected Versions
Edinburghtour Edinburgh By Bus	All versions

Running on/with	Platform Versions
Adobe Phonegap	Version 2.0.0
Adobe Phonegap	Version 2.0.0 rc1
Adobe Phonegap	Version 2.1.0
Adobe Phonegap	Version 2.2.0
Adobe Phonegap	Version 2.2.0 rc1
Adobe Phonegap	Version 2.2.0 rc2
Adobe Phonegap	Version 2.3.0
Adobe Phonegap	Version 2.3.0 rc1
Adobe Phonegap	Version 2.3.0 rc2
Adobe Phonegap	Version 2.4.0
Adobe Phonegap	Version 2.4.0 rc1
Adobe Phonegap	Version 2.5.0
Adobe Phonegap	Version 2.5.0 rc1
Adobe Phonegap	Version 2.6.0
Adobe Phonegap	Version 2.6.0 rc1
Adobe Phonegap	Version 2.7.0
Adobe Phonegap	Version 2.7.0 rc1
Adobe Phonegap	Version 2.8.0
Adobe Phonegap	Version 2.8.1
Adobe Phonegap	Version 2.9.0
Adobe Phonegap	Version 2.9.0 rc1