Lucene search

K
hackappHackapp.orgHACKAPP:NET.PRIEWASSER.ANDROID.ALPWEATHER.APK
HistoryApr 01, 2016 - 9:35 a.m.

Alp Weather - Exported components, External URLs, Suspicious files vulnerabilities

2016-04-0109:35:37
Hackapp.org
hackapp.com
6

HackApp vulnerability scanner discovered that application Alp Weather published at the β€˜play’ market has multiple vulnerabilities.

Name

Alp Weather

Vendor

Daniel Priewasser

Link

NET.PRIEWASSER.ANDROID.ALPWEATHER.APK

Store

play

Version

2.0.3
  • NOTICE
  • External URLs

    Were do they point?

  • Suspicious files

    Are you sure these files should be here?

  • Unsafe deleting

    All items deleted with 'file.delete()' could be recovered.

  • MEDIUM
  • Exported components

    Other applications could access the interfaces.

  • WebView JavaScript enabled

    WebView 'setJavaScriptEnabled(true)' could be exploited during cross-site scripting attacks.

  • WebView files access

    Control of WebView context allows to access local files.

CPENameOperatorVersion
alp weatherle2.0.3