| Titolo | Fujian Kelixin Communication Co., Ltd. Command and Dispatch Platform Command and Dispatch Platform SQL Injection |
|---|
| Descrizione | here is a SQL injection vulnerability in the command and dispatch platform of Fujian Kelixun Communications Co., Ltd. An attacker can use this vulnerability to operate on sensitive data in the database. There is a sql injection vulnerability in the value of parameter uuid, The vulnerability path is: api/client/user/pwd_update.php. |
|---|
| Fonte | ⚠️ https://h0e4a0r1t.github.io/2024/vulns/Fujian%20Kelixin%20Communication%20Co.,%20Ltd.%20Command%20and%20Dispatch%20Platform%20SQL%20Injection%20Vulnerability-pwd_update.php.pdf |
|---|
| Utente | H0e4a0r1t (UID 65358) |
|---|
| Sottomissione | 18/03/2024 06:38 (3 anni fa) |
|---|
| Moderazione | 18/03/2024 20:01 (13 hours later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 257198 [Fujian Kelixin Communication Command and Dispatch Platform fino a 20240318 pwd_update.php uuid iniezione SQL] |
|---|
| Punti | 19 |
|---|