exploit/android/browser/webview_addjavascriptinterface

weaponized

Android Browser and WebView addJavascriptInterface Code Execution

view exploit source metasploittype exploitpublished 2012-12-21catalog metasploit

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2013-4710US	high9.3	43.4% (99th)	Exploit	2014-03-03
Android 3.0 through 4.1.x on Disney Mobile, eAccess, KDDI, NTT DOCOMO, SoftBank, and other devices does not properly implement the WebView class, which allows remote attackers to e…
CVE-2012-6636US	medium6.8	38.5% (99th)	Exploit	2014-03-03
The Android API before 17 does not properly restrict the WebView.addJavascriptInterface method, which allows remote attackers to execute arbitrary methods of Java objects by using…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.