CVE-2023-5782: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in Tongda OA 2017 up to 11.10. Affected is an unknown function of the file /manage/deletequery.php of the component General News. The manipulation of the argument NEWSID leads to sql injection. The exploit has been disclosed to the publ...