SQL Injection Vulnerability in Fujian Kelixin Communication Platform

CVE-2024-2621

What is CVE-2024-2621?

A serious SQL injection vulnerability has been identified within the Fujian Kelixin Communication Command and Dispatch Platform, specifically affecting the 'pwd_update.php' script in the file path api/client/user/. The flaw arises from improper handling of user input in the 'uuid' argument, which allows remote attackers to manipulate SQL queries. This exploitation can lead to unauthorized access to sensitive database information, posing significant security risks. The vulnerability has been publicly disclosed and is classified as critical, making immediate attention and remedial actions essential for safeguarding the integrity of the affected systems. Further details can be found in VDB-257198.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References