Lucene search

K
hackappHackapp.orgHACKAPP:COM.DOAE.TAYSSIR.ZAWAJ.APK
HistoryApr 01, 2016 - 9:05 a.m.

موسوعة دعاء تعجيل و تيسير زواج - Corrupted files, Dynamic Code Loading, External URLs vulnerabilities

2016-04-0109:05:24
Hackapp.org
hackapp.com
7

HackApp vulnerability scanner discovered that application موسوعة دعاء تعجيل و تيسير زواج published at the ‘play’ market has multiple vulnerabilities.

Name

موسوعة دعاء تعجيل و تيسير زواج

Vendor

Sagesse

Link

COM.DOAE.TAYSSIR.ZAWAJ.APK

Store

play

Version

1.2
  • MEDIUM
  • WebView files access

    Control of WebView context allows to access local files.

  • SQLite database found

    Check VACUUM cleaning.

  • WebView JavaScript enabled

    WebView 'setJavaScriptEnabled(true)' could be exploited during cross-site scripting attacks.

  • Dynamic Code Loading

    Code for 'DexClassLoader' could be tampered.

  • NOTICE
  • Unsafe deleting

    All items deleted with 'file.delete()' could be recovered.

  • External URLs

    Were do they point?

  • Corrupted files

    Can't parse these files. Corrupted? Check manually.