Sql injection

2023-09-1722:15:00

PRIOn knowledge base

www.prio-n.com

tongda oa

sql injection

critical vulnerability

delete.php

vdb-239872

nvd

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.8%

JSON

A vulnerability has been found in Tongda OA up to 11.10 and classified as critical. This vulnerability affects unknown code of the file general/hr/recruit/plan/delete.php. The manipulation of the argument PLAN_ID leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-239872.

CPENameOperatorVersion
tongda_office_anywherele11.10

CPE	Name	Operator	Version
	tongda_office_anywhere	le	11.10

References

github.com/husterdjx/cve/blob/main/sql1.md

vuldb.com/?ctiid.239872

vuldb.com/?id.239872