CVE-2024-4654

A vulnerability was found in BlueNet Technology Clinical Browsing System 1.2.1. It has been classified as critical. This affects an unknown part of the file /xds/cloudInterface.php. The manipulation of the argument INSTI_CODE leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-263499.

• CWE-89

• https://github.com/Hefei-Coffee/cve/blob/main/sql2.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.263499Permissions Required, VDB Entry
• https://vuldb.com/?id.263499Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.330631Third Party Advisory, VDB Entry
• https://github.com/Hefei-Coffee/cve/blob/main/sql2.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.263499Permissions Required, VDB Entry
• https://vuldb.com/?id.263499Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.330631Third Party Advisory, VDB Entry

Published

May 8, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-4653A vulnerability was found in BlueNet Technology Clinical Bro…7.5
• CVE-2024-46531phpgurukul Vehicle Record Management System v1.0 was discove…6.3
• CVE-2024-46532SQL Injection vulnerability in OpenHIS v.1.0 allows an attac…9.8
• CVE-2024-46535Jepaas v7.2.8 was discovered to contain a SQL injection vuln…9.8
• CVE-2024-46538A cross-site scripting (XSS) vulnerability in pfsense v2.5.2…4.8
• CVE-2024-46539Insecure permissions in the Bluetooth Low Energy (BLE) compo…8.2
• CVE-2024-46540A remote code execution (RCE) vulnerability in the component…6.3
• CVE-2024-46542Veritas / Arctera Data Insight before 7.1.1 allows Applicati…6.5
• CVE-2024-46544Incorrect Default Permissions vulnerability in Apache Tomcat…5.9
• CVE-2024-46546NEXTU FLETA AX1500 WIFI6 Router v1.0.3 was discovered to con…7.3
• CVE-2024-46547A vulnerability was found in Romain Bourdon Wampserver all v…7.5
• CVE-2024-46548TP-Link Tapo P125M and Kasa KP125M v1.0.3 was discovered to …6.3