Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2023-5030

Tongda OA delete.php sql injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A vulnerability has been found in Tongda OA up to 11.10 and classified as critical. This vulnerability affects unknown code of the file general/hr/recruit/plan/delete.php. The manipulation of the argument PLAN_ID leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-239872.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Tongda OA

  • 11.0affected
  • 11.1affected
  • 11.2affected
  • 11.3affected
  • 11.4affected
  • 11.5affected
  • 11.6affected
  • 11.7affected
  • 11.8affected
  • 11.9affected
  • 11.10affected

References