Nokia email app pwnage

This was an interesting bug which I found in the Nokia email app for Symbian mobiles in MARCH 2013.
The email app was not filtering the JavaScripts in the body part of the mail and thereby leading to JavaScript execution via mail.


THE VERSION OF NOKIA MAIL: 10.2.0.29(main)
NOKIA 5233 FIRMWARE COMPLETE DETAILS
software version: v51.1.002
software version date: 19-10-2011
custom version : 51.1.002.C01.01
custom version date: 19-10-2011
language set: 21
Model: 5233
type: Rm-625

This bug took a long time in fixing but finally when they did ;-) I got a mail from Nokia

TRIBUTE TO MY OLD PAL "NOKIA 5233" who passed away recently breaking its screen, sound system, and everything after slipping off from my hand.

LFI in Nokia maps

Well, this is my first blog-post, and I am going to share a Local File inclusion bug which I spotted in Nokia maps.

http://maps.nokia.com/services/file:///etc/passwd

reported on 2nd  JAN 2013
Nokia fixes it on 20th JAN 2013

And I received an awesome RED NOKIA LUMIA 920 :)