| Titel | Fujian Kelixin Communication Co., Ltd. Command and Dispatch Platform Command and Dispatch Platform SQL Injection |
|---|
| Beschreibung | here is a SQL injection vulnerability in the command and dispatch platform of Fujian Kelixun Communications Co., Ltd. An attacker can use this vulnerability to operate on sensitive data in the database. There is a sql injection vulnerability in the value of parameter uuid, The vulnerability path is: api/client/user/pwd_update.php. |
|---|
| Quelle | ⚠️ https://h0e4a0r1t.github.io/2024/vulns/Fujian%20Kelixin%20Communication%20Co.,%20Ltd.%20Command%20and%20Dispatch%20Platform%20SQL%20Injection%20Vulnerability-pwd_update.php.pdf |
|---|
| Benutzer | H0e4a0r1t (UID 65358) |
|---|
| Einreichung | 18.03.2024 06:38 (vor 3 Jahren) |
|---|
| Moderieren | 18.03.2024 20:01 (13 hours later) |
|---|
| Status | Akzeptiert |
|---|
| VulDB Eintrag | 257198 [Fujian Kelixin Communication Command and Dispatch Platform bis 20240318 pwd_update.php uuid SQL Injection] |
|---|
| Punkte | 19 |
|---|