| Название | Fujian Kelixin Communication Co., Ltd. Command and Dispatch Platform Command and Dispatch Platform SQL Injection |
|---|
| Описание | here is a SQL injection vulnerability in the command and dispatch platform of Fujian Kelixun Communications Co., Ltd. An attacker can use this vulnerability to operate on sensitive data in the database. There is a sql injection vulnerability in the value of parameter uuid, The vulnerability path is: api/client/user/pwd_update.php. |
|---|
| Источник | ⚠️ https://h0e4a0r1t.github.io/2024/vulns/Fujian%20Kelixin%20Communication%20Co.,%20Ltd.%20Command%20and%20Dispatch%20Platform%20SQL%20Injection%20Vulnerability-pwd_update.php.pdf |
|---|
| Пользователь | H0e4a0r1t (UID 65358) |
|---|
| Представление | 18.03.2024 06:38 (3 лет назад) |
|---|
| Модерация | 18.03.2024 20:01 (13 hours later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 257198 [Fujian Kelixin Communication Command and Dispatch Platform до 20240318 pwd_update.php uuid SQL-инъекция] |
|---|
| Баллы | 19 |
|---|