CVE-2024-3688

CVE-2024-3688 affects Xiamen Four-Faith RMP Router Management Platform 5.2.2. The vulnerability is a SQL injection in /Device/Device/GetDeviceInfoList?deviceCode=&searchField=&deviceState= where manipulating the groupId parameter enables remote exploitation. Multiple connected sources corroborate...

Xiamen Four-Faith RMP Router Management Platform SQL注入漏洞

Xiamen Four-Faith RMP Router Management Platform is an online chat system from Xiamen Four-Faith, China. A SQL injection vulnerability exists in Xiamen Four-Faith RMP Router Management Platform version 5.2.2, which stems from an incorrect operation of the parameter groupId that can lead to sql...

CVE-2024-3688: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Xiamen Four-Faith RMP Router Management Platform 5.2.2. It has been declared as critical. This vulnerability affects unknown code of the file /Device/Device/GetDeviceInfoList?deviceCode=&searchField=&deviceState=. The manipulation of the argument groupId leads to sql...

Weak Password Vulnerability in RMP Router Management Platform of Xiamen Sihsin Communication Technology Co.

Xiamen Sihsin Communication Technology Co., Ltd. focuses on the research and development, production, promotion and service of high-end wireless communication transmission equipment in the industrial field, and is a backbone enterprise in the field of wireless communication of the Internet of...