vulnerability was found in Fujian Kelixin Communication Command and Dispatch Platform up to 20240313. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file api/client/get_extension_yl.php. The manipulation of the argument imei leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-257065 was assigned to this vulnerability.
| Link | Resource |
|---|---|
| https://h0e4a0r1t.github.io/2024/vulns/Fujian%20Kelixin%20Communication%20Co.,%20Ltd.%20Command%20and%20Dispatch%20Platform%20SQL%20Injection%20Vulnerability-get_extension_yl.pdf | Broken Link |
| https://vuldb.com/?ctiid.257065 | Permissions Required VDB Entry |
| https://vuldb.com/?id.257065 | Third Party Advisory VDB Entry |
| https://h0e4a0r1t.github.io/2024/vulns/Fujian%20Kelixin%20Communication%20Co.,%20Ltd.%20Command%20and%20Dispatch%20Platform%20SQL%20Injection%20Vulnerability-get_extension_yl.pdf | Broken Link |
| https://vuldb.com/?ctiid.257065 | Permissions Required VDB Entry |
| https://vuldb.com/?id.257065 | Third Party Advisory VDB Entry |
Configuration 1 (hide)
|
05 Mar 2025, 16:21
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Kelixin Communication Command And Dispatch Project
Kelixin Communication Command And Dispatch Project kelixin Communication Command And Dispatch |
|
| CPE | cpe:2.3:a:kelixin_communication_command_and_dispatch_project:kelixin_communication_command_and_dispatch:*:*:*:*:*:*:*:* | |
| References | () https://h0e4a0r1t.github.io/2024/vulns/Fujian%20Kelixin%20Communication%20Co.,%20Ltd.%20Command%20and%20Dispatch%20Platform%20SQL%20Injection%20Vulnerability-get_extension_yl.pdf - Broken Link | |
| References | () https://vuldb.com/?ctiid.257065 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.257065 - Third Party Advisory, VDB Entry |
21 Nov 2024, 09:10
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://h0e4a0r1t.github.io/2024/vulns/Fujian%20Kelixin%20Communication%20Co.,%20Ltd.%20Command%20and%20Dispatch%20Platform%20SQL%20Injection%20Vulnerability-get_extension_yl.pdf - | |
| References | () https://vuldb.com/?ctiid.257065 - | |
| References | () https://vuldb.com/?id.257065 - |
Published : 2024-03-17 15:15
Updated : 2025-03-05 16:21
NVD link : CVE-2024-2566
Mitre link : CVE-2024-2566
CVE.ORG link : CVE-2024-2566
JSON object : View
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')