Security Remote Desktop 0.9.4 Android CSRF / Command Injection January 20, 2015 007admin Leave a comment Remote Desktop version 0.9.4 Android suffers from local command injection and cross site request forgery vulnerabilities.