The local file include web vulnerability allows remote attackers to include local files from the mobile device to compromise the application or mobile device. The vulnerability is located in the `file` value of the `index.php` file. Remote attackers are able to inject own malicious files to compromise the mobile device or application. The request method to inject is POST and the attack vector is located on the application-side of the service. The persistent input validation web vulnerability allows remote attackers to inject own malicious script codes to the application-side of the service. The vulnerability is located in the `name` value of the `index.php` file. Remote attackers are able to inject own malicious script codes to compromise the application or mobile device. The request method to inject is POST and the attack vector is located on the application-side of the service.