CVE-2014-8507

Multiple SQL injection vulnerabilities in the queryLastApp method in packages/WAPPushManager/src/com/android/smspush/WapPushManager.java in the WAPPushManager module in Android before 5.0.0 allow remote attackers to execute arbitrary SQL commands, and consequently launch an activity or service, v...

CVE-2014-8507: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the queryLastApp method in packages/WAPPushManager/src/com/android/smspush/WapPushManager.java in the WAPPushManager module in Android before 5.0.0 allow remote attackers to execute arbitrary SQL commands, and consequently launch an activity or service, v...

PT-2014-8570

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.0.0 Description The issue concerns multiple SQL injection vulnerabilities in the queryLastApp method within the WAPPushManager module. These vulnerabilities allow remote attackers to execute arbitrary SQL commands b...