CVE-2024-2620

A vulnerability has been found in Fujian Kelixin Communication Command and Dispatch Platform up to 20240318 and classified as critical. Affected by this vulnerability is an unknown functionality of the file api/client/down_file.php. The manipulation of the argument uuid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-257197 was assigned to this vulnerability.

• CWE-89

• https://h0e4a0r1t.github.io/2024/vulns/Fujian%20Kelixin%20Communication%20Co.,%20Ltd.%20Command%20and%20Dispatch%20Platform%20SQL%20Injection%20Vulnerability-down_file.pdfBroken Link
• https://vuldb.com/?ctiid.257197Permissions Required
• https://vuldb.com/?id.257197Permissions Required, Third Party Advisory
• https://h0e4a0r1t.github.io/2024/vulns/Fujian%20Kelixin%20Communication%20Co.,%20Ltd.%20Command%20and%20Dispatch%20Platform%20SQL%20Injection%20Vulnerability-down_file.pdfBroken Link
• https://vuldb.com/?ctiid.257197Permissions Required
• https://vuldb.com/?id.257197Permissions Required, Third Party Advisory

Published

Mar 19, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-26194Secure Boot Security Feature Bypass Vulnerability7.4
• CVE-2024-26195DHCP Server Service Remote Code Execution Vulnerability7.2
• CVE-2024-26196Microsoft Edge for Android (Chromium-based) Information Disc…4.3
• CVE-2024-26197Windows Standards-Based Storage Management Service Denial of…6.5
• CVE-2024-26198Microsoft Exchange Server Remote Code Execution Vulnerabilit…8.8
• CVE-2024-26199Microsoft Office Elevation of Privilege Vulnerability7.8
• CVE-2024-26200Windows Routing and Remote Access Service (RRAS) Remote Code…8.8
• CVE-2024-26201Microsoft Intune Linux Agent Elevation of Privilege Vulnerab…6.6
• CVE-2024-26202DHCP Server Service Remote Code Execution Vulnerability7.2
• CVE-2024-26203Azure Data Studio Elevation of Privilege Vulnerability7.3
• CVE-2024-26204Outlook for Android Information Disclosure Vulnerability7.5
• CVE-2024-26205Windows Routing and Remote Access Service (RRAS) Remote Code…8.8