SQL Injection Vulnerability in Fujian Kelixun Communication Platform
CVE-2025-5107
Key Information:
Badges
What is CVE-2025-5107?
A significant SQL injection vulnerability has been identified within the Fujian Kelixun Communication platform, specifically in the /app/xml_cdr/xml_cdr_details.php file. This vulnerability is triggered when an attacker manipulates the 'uuid' argument, potentially allowing for unauthorized access and manipulation of the database. The attack can be executed remotely, exposing systems to exploitation. As the issue has been publicly disclosed, it is recommended that users take immediate steps to secure their installations and monitor for any suspicious activity.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Kelixun 1.0
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
CVSS V4
Timeline
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved