SAP Business One for Android version 1.2.3 suffers from an XML external entity injection vulnerability. Continue reading...