CVE-2024-2621

A vulnerability was found in Fujian Kelixin Communication Command and Dispatch Platform up to 20240318 and classified as critical. Affected by this issue is some unknown functionality of the file api/client/user/pwd_update.php. The manipulation of the argument uuid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-257198 is the identifier assigned to this vulnerability.

• CWE-89

• https://h0e4a0r1t.github.io/2024/vulns/Fujian%20Kelixin%20Communication%20Co.,%20Ltd.%20Command%20and%20Dispatch%20Platform%20SQL%20Injection%20Vulnerability-pwd_update.php.pdfBroken Link
• https://vuldb.com/?ctiid.257198Permissions Required
• https://vuldb.com/?id.257198Third Party Advisory
• https://h0e4a0r1t.github.io/2024/vulns/Fujian%20Kelixin%20Communication%20Co.,%20Ltd.%20Command%20and%20Dispatch%20Platform%20SQL%20Injection%20Vulnerability-pwd_update.php.pdfBroken Link
• https://vuldb.com/?ctiid.257198Permissions Required
• https://vuldb.com/?id.257198Third Party Advisory

Published

Mar 19, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-26203Azure Data Studio Elevation of Privilege Vulnerability7.3
• CVE-2024-26204Outlook for Android Information Disclosure Vulnerability7.5
• CVE-2024-26205Windows Routing and Remote Access Service (RRAS) Remote Code…8.8
• CVE-2024-26207Windows Remote Access Connection Manager Information Disclos…5.5
• CVE-2024-26208Microsoft Message Queuing (MSMQ) Remote Code Execution Vulne…7.2
• CVE-2024-26209Microsoft Local Security Authority Subsystem Service Informa…5.5
• CVE-2024-26210Microsoft WDAC OLE DB provider for SQL Server Remote Code Ex…8.8
• CVE-2024-26211Windows Remote Access Connection Manager Elevation of Privil…7.8
• CVE-2024-26212DHCP Server Service Denial of Service Vulnerability7.5
• CVE-2024-26213Microsoft Brokering File System Elevation of Privilege Vulne…7
• CVE-2024-26214Microsoft WDAC SQL Server ODBC Driver Remote Code Execution …8.8
• CVE-2024-26215DHCP Server Service Denial of Service Vulnerability7.5