Android : SQLite query injection

The application creates an SQLite database query based on the user input. An attacker can use it to gain unauthorized access to application data.

There is an important difference between SQL injections for SQL and SQLite. In contrast to classical attacks of this type, SQLite database query injection gives an attacker unauthorized read access, but does not allow to change the state of the database.