Lucene search
K

CVE-2023-7022

šŸ—“ļøĀ 21 Dec 2023Ā 01:31:04Reported byĀ VulDBTypeĀ 
cve
Ā cve
šŸ”—Ā web.nvd.nist.govšŸ‘Ā 47Ā Views🌐 WEB

Critical SQL injection vulnerability in Tongda OA 2017 up to 11.9, allowing remote attack via delete_all.php

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
Circl
CVE-2023-7022
21 Dec 202303:23
–circl
CNNVD
Tongda2000 SQL Injection Vulnerability
21 Dec 202300:00
–cnnvd
Cvelist
CVE-2023-7022 Tongda OA 2017 delete_all.php sql injection
21 Dec 202301:31
–cvelist
EUVD
EUVD-2023-59213
3 Oct 202520:07
–euvd
NVD
CVE-2023-7022
21 Dec 202302:15
–nvd
Prion
Sql injection
21 Dec 202302:15
–prion
Vulnrichment
CVE-2023-7022 Tongda OA 2017 delete_all.php sql injection
21 Dec 202301:31
–vulnrichment
NVD
Vulners
Node
[
  {
    "vendor": "Tongda",
    "product": "OA 2017",
    "versions": [
      {
        "version": "11.0",
        "status": "affected"
      },
      {
        "version": "11.1",
        "status": "affected"
      },
      {
        "version": "11.2",
        "status": "affected"
      },
      {
        "version": "11.3",
        "status": "affected"
      },
      {
        "version": "11.4",
        "status": "affected"
      },
      {
        "version": "11.5",
        "status": "affected"
      },
      {
        "version": "11.6",
        "status": "affected"
      },
      {
        "version": "11.7",
        "status": "affected"
      },
      {
        "version": "11.8",
        "status": "affected"
      },
      {
        "version": "11.9",
        "status": "affected"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
DELETE_STRquery paramgeneral/work_plan/manage/delete_all.phpSQL injection vulnerability in Tongda OA 2017 up to 11.9 via DELETE_STR parameter in delete_all.php.CWE-89

Data

Build on a solid foundation withĀ Vulners data

WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data

Api

Power your application withĀ Vulners API

The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access

App

Assess and manage vulnerabilities withĀ VulnersĀ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

19 Mar 2025 15:40Current
8.2High risk
Vulners AI Score8.2
CVSS 3.16.3 - 9.8
CVSS 26.5
CVSS 36.3
EPSS0.00061
SSVC
47