Lucene search
PRIOn knowledge basePRION:CVE-2023-6607HistoryDec 08, 2023 - 2:15 p.m.
Sql injection
2023-12-0814:15:00
PRIOn knowledge base
www.prio-n.com
7
tongda oa 2017
critical
sql injection
delete.php
vdb-247243
public exploit
vendor non-responsive
A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical. Affected by this vulnerability is an unknown functionality of the file general/wiki/cp/manage/delete.php. The manipulation of the argument TERM_ID_STR leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-247243. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
| CPE | Name | Operator | Version |
|---|---|---|---|
| tongda_office_anywhere | le | 11.10 | |
| tongda_office_anywhere | eq | 2017 |
Related
cve
cve
CVE-2023-6607
2023-12-08 14:15:07
nvd
nvd
CVE-2023-6607
2023-12-08 14:15:07
cvelist
cvelist
CVE-2023-6607 Tongda OA 2017 delete.php sql injection
2023-12-08 14:00:07