CVE-2019-2196 PoC — Android Framework组件SQL注入漏洞

Source

https://github.com/IOActive/AOSP-DownloadProviderDbDumperSQLiLimit

Associated Vulnerability

Title:Android Framework组件SQL注入漏洞 (CVE-2019-2196)
Description:In Download Provider, there is possible SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-135269143

Description

PoC Exploiting SQL Injection in Android's Download Provider in Sort Parameter (CVE-2019-2196)

Readme

# AOSP-DownloadProviderDbDumperSQLiLimit
PoC Exploiting SQL Injection in Android's Download Provider in Sort Parameter (CVE-2019-2196)

## Security Advisory
[Android (AOSP) Download Provider SQL Injection in Query Sort Parameter (CVE-2019-2196)](https://act-on.ioactive.com/acton/attachment/34793/f-5c01ebda-2cb5-47b9-9330-2d71b3a34db6/1/-/-/-/-/cve-2019-2196.pdf)

## Demo
![PoC video](demo.gif)

File Snapshot


 [4.0K]  /data/pocs/c89f137ddd8ff1b862b11346c42db681899e4c58
├── [4.0K]  app
│   ├── [ 978]  build.gradle
│   ├── [ 751]  proguard-rules.pro
│   └── [4.0K]  src
│       └── [4.0K]  main
│           ├── [ 853]  AndroidManifest.xml
│           ├── [4.0K]  java
│           │   └── [4.0K]  com
│           │       └── [4.0K]  ioactive
│           │           └── [4.0K]  downloadProviderDbDumperSQLiLimit
│           │               └── [8.1K]  MainActivity.java
│           └── [4.0K]  res
│               ├── [4.0K]  drawable
│               │   └── [5.5K]  ic_launcher_background.xml
│               ├── [4.0K]  drawable-v24
│               │   └── [1.8K]  ic_launcher_foreground.xml
│               ├── [4.0K]  layout
│               │   └── [1.8K]  activity_main.xml
│               ├── [4.0K]  mipmap-anydpi-v26
│               │   ├── [ 272]  ic_launcher_round.xml
│               │   └── [ 272]  ic_launcher.xml
│               ├── [4.0K]  mipmap-hdpi
│               │   ├── [3.0K]  ic_launcher.png
│               │   └── [4.9K]  ic_launcher_round.png
│               ├── [4.0K]  mipmap-mdpi
│               │   ├── [2.0K]  ic_launcher.png
│               │   └── [2.8K]  ic_launcher_round.png
│               ├── [4.0K]  mipmap-xhdpi
│               │   ├── [4.5K]  ic_launcher.png
│               │   └── [6.9K]  ic_launcher_round.png
│               ├── [4.0K]  mipmap-xxhdpi
│               │   ├── [6.3K]  ic_launcher.png
│               │   └── [ 10K]  ic_launcher_round.png
│               ├── [4.0K]  mipmap-xxxhdpi
│               │   ├── [9.0K]  ic_launcher.png
│               │   └── [ 15K]  ic_launcher_round.png
│               └── [4.0K]  values
│                   ├── [ 208]  colors.xml
│                   ├── [  93]  strings.xml
│                   └── [ 383]  styles.xml
├── [ 546]  build.gradle
├── [544K]  demo.gif
├── [4.0K]  gradle
│   └── [4.0K]  wrapper
│       ├── [ 53K]  gradle-wrapper.jar
│       └── [ 233]  gradle-wrapper.properties
├── [ 726]  gradle.properties
├── [5.2K]  gradlew
├── [2.1K]  gradlew.bat
├── [ 34K]  LICENSE
├── [ 397]  README.md
└── [  15]  settings.gradle

20 directories, 32 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!