Lucene search
PRIOn knowledge basePRION:CVE-2023-40121HistoryOct 27, 2023 - 9:15 p.m.
Sql injection
2023-10-2721:15:00
PRIOn knowledge base
www.prio-n.com
5
appendescapedsqlstring
databaseutils
sql injection
unsafe deserialization
local information disclosure
user execution privileges
In appendEscapedSQLString of DatabaseUtils.java, there is a possible SQL injection due to unsafe deserialization. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.
Related
cve
cve
CVE-2023-40121
2023-10-27 21:15:08
cnvd
cnvd
Google Android Information Disclosure Vulnerability (CNVD-2024-10421)
2023-10-16 00:00:00
nvd
nvd
CVE-2023-40121
2023-10-27 21:15:08
osv
osv
SQL Injection in ContactsProvider#query via URI PathSegments
2023-10-01 00:00:00
cvelist
cvelist
CVE-2023-40121
2023-10-27 20:22:56