CVE-2024-2622

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in Fujian Kelixin Communication Command and Dispatch Platform up to 20240318. It has been classified as critical. This affects an unknown part of the file /api/client/editemedia.php. The manipulation of the argument number/enterprise_uuid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-257199.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Mar 19, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-262205.0Windows Mobile Hotspot Information Disclosure Vulnerability CVE-2024-262216.6Windows DNS Server Remote Code Execution Vulnerability CVE-2024-262226.6Windows DNS Server Remote Code Execution Vulnerability CVE-2024-262236.6Windows DNS Server Remote Code Execution Vulnerability CVE-2024-262246.6Windows DNS Server Remote Code Execution Vulnerability CVE-2024-262266.5Windows Distributed File System (DFS) Information Disclosure Vulnerability CVE-2024-262276.6Windows DNS Server Remote Code Execution Vulnerability CVE-2024-262287.8Windows Cryptographic Services Security Feature Bypass Vulnerability CVE-2024-262297.8Windows CSC Service Elevation of Privilege Vulnerability CVE-2024-26236.4The Essential Addons for Elementor – Best Elementor Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to St CVE-2024-262307.8Windows Telephony Server Elevation of Privilege Vulnerability CVE-2024-262316.6Windows DNS Server Remote Code Execution Vulnerability