AOSP-DownloadProviderDbDumperSQLiWhere

AOSP-DownloadProviderDbDumperSQLiWhere PoC che sfrutta l'SQL Injection nel Provider di Download di Android nel parametro Selection CVE-2019-2198 Advisory di Sicurezza SQL Injection nel Provider di Download di Android AOSP nel parametro Query Selection CVE-2019-2198 Dimostrazione...

CVE-2019-2198

creationtimestamp| type| source ---|---|--- 2020-01-20 08:01:45+00:00| exploited| https://t.me/androidMalware/614 2020-01-20 09:43:49+00:00| exploited| https://t.me/thebugbountyhunter/3689 2024-02-13 17:07:45+00:00| seen| https://t.me/ctinow/183957 2026-08-02 14:14:52+00:00|...

CVE-2019-2198

In Download Provider, there is a possible SQL injection vulnerability. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID:...

CVE-2019-2198

CVE-2019-2198 is a SQL injection vulnerability in Android’s Download Provider that can lead to local information disclosure without user interaction. Affected: Android 8.0–10 (Download Provider query selection parameter). Root cause: SQL injection in the Download Provider. Impact: local informati...

CVE-2019-2198

In Download Provider, there is a possible SQL injection vulnerability. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID:...