SQL Injection Vulnerability in Fujian Kelixin Communication Command and Dispatch Platform
CVE-2024-2620

9.8CRITICAL

Key Information:

Vendor
CVE Published:
19 March 2024

Badges

๐Ÿ‘พ Exploit Exists

What is CVE-2024-2620?

A critical SQL injection vulnerability has been identified in the Fujian Kelixin Communication Command and Dispatch Platform, specifically within the file handling script down_file.php. By manipulating the 'uuid' parameter, an attacker could potentially execute arbitrary SQL queries, leading to unauthorized access to sensitive data and further exploitation of the system. This vulnerability can be exploited remotely, posing a significant threat to the integrity and availability of the affected platform. Users are strongly advised to implement the necessary security patches and updates to mitigate the risks associated with this vulnerability. For further details, refer to the corresponding vulnerability documentation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

Command and Dispatch Platform 20240318

References

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • ๐Ÿ‘พ

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

H0e4a0r1t (VulDB User)
.