SQL Injection Vulnerability in Fujian Kelixin Communication Command and Dispatch Platform

CVE-2024-2566

What is CVE-2024-2566?

A security vulnerability has been identified in the Fujian Kelixin Communication Command and Dispatch Platform, allowing for SQL injection through the file api/client/get_extension_yl.php. By manipulating the 'imei' argument, attackers can execute arbitrary SQL commands remotely. This flaw, acknowledged as critical, has already been disclosed and poses significant risks to affected systems. Users are urged to apply security patches and review their configurations to mitigate potential exploitation. For further details, visit the relevant resources linked below.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References