critical9.8
CVE-2014-4959
**DISPUTED** SQL injection vulnerability in SQLiteDatabase.java in the SQLi Api in Android allows remote attackers to execute arbitrary SQL commands via the de…
Impact
**DISPUTED** SQL injection vulnerability in SQLiteDatabase.java in the SQLi Api in Android allows remote attackers to execute arbitrary SQL commands via the delete method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Android | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/127651/Android-SDK-SQL-Injection.html
- http://seclists.org/fulldisclosure/2014/Jul/138
- http://seclists.org/fulldisclosure/2014/Jul/139
- http://www.securityfocus.com/bid/68912
- http://packetstormsecurity.com/files/127651/Android-SDK-SQL-Injection.html
- http://seclists.org/fulldisclosure/2014/Jul/138
- http://seclists.org/fulldisclosure/2014/Jul/139
- http://www.securityfocus.com/bid/68912