Sql injection

2023-10-1018:15:00

PRIOn knowledge base

www.prio-n.com

tongda oa 2017

sql injection

delete.php

remote attack

vdb-241650

critical vulnerability

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.3%

JSON

A vulnerability classified as critical has been found in Tongda OA 2017 11.10. Affected is an unknown function of the file general/hr/salary/welfare_manage/delete.php. The manipulation of the argument WELFARE_ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-241650 is the identifier assigned to this vulnerability.

CPENameOperatorVersion
office_anywherege11.10
office_anywhereeq2017

CPE	Name	Operator	Version
	office_anywhere	ge	11.10
	office_anywhere	eq	2017

References

github.com/RCEraser/cve/blob/main/sql_inject_4.md

vuldb.com/?ctiid.241650

vuldb.com/?id.241650