| 标题 | Fujian Kelixin Communication Co., Ltd. Command and Dispatch Platform Command and Dispatch Platform SQL Injection |
|---|
| 描述 | here is a SQL injection vulnerability in the command and dispatch platform of Fujian Kelixun Communications Co., Ltd. An attacker can use this vulnerability to operate on sensitive data in the database. There is a sql injection vulnerability in the value of parameter uuid, The vulnerability path is: api/client/user/pwd_update.php. |
|---|
| 来源 | ⚠️ https://h0e4a0r1t.github.io/2024/vulns/Fujian%20Kelixin%20Communication%20Co.,%20Ltd.%20Command%20and%20Dispatch%20Platform%20SQL%20Injection%20Vulnerability-pwd_update.php.pdf |
|---|
| 用户 | H0e4a0r1t (UID 65358) |
|---|
| 提交 | 2024-03-18 06時38分 (3 年前) |
|---|
| 管理 | 2024-03-18 20時01分 (13 hours later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 257198 [Fujian Kelixin Communication Command and Dispatch Platform 直到 20240318 pwd_update.php uuid SQL注入] |
|---|
| 积分 | 19 |
|---|