Airscanner Mobile Security Advisory #08031201 – FlexiSPY.com’s user administration web application contains a critical bug that allows anyone to inject spoofed incoming/outgoing phone records, SMS messages, and Emails into the backend database for ANY user of the software if the IMEI value is known.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/64675/08031201-flexispy.txt
Source: https://packetstormsecurity.com/files/64675/08031201-flexispy.txt.html