Lucene search

K
hackappHackapp.orgHACKAPP:COM.COMMALITE.SOLITAIRECOLLECTION.APK
HistoryApr 01, 2016 - 9:49 a.m.

550+ Card Games Solitaire Pack - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

2016-04-0109:49:38
Hackapp.org
hackapp.com
6

HackApp vulnerability scanner discovered that application 550+ Card Games Solitaire Pack published at the β€˜play’ market has multiple vulnerabilities.

Name

550+ Card Games Solitaire Pack

Vendor

CommaLite

Link

COM.COMMALITE.SOLITAIRECOLLECTION.APK

Store

play

Version

1.02
  • MEDIUM
  • Dynamic Code Loading

    Code for 'DexClassLoader' could be tampered.

  • WebView files access

    Control of WebView context allows to access local files.

  • WebView JavaScript enabled

    WebView 'setJavaScriptEnabled(true)' could be exploited during cross-site scripting attacks.

  • NOTICE
  • External URLs

    Were do they point?

  • Native code usage

    Native code (.so) usage 'System.loadLibrary();' is found.

  • Suspicious files

    Are you sure these files should be here?

  • Unsafe deleting

    All items deleted with 'file.delete()' could be recovered.

CPENameOperatorVersion
550+ card games solitaire packle1.02