CVE-2023-6276

A vulnerability classified as critical has been found in Tongda OA 2017 up to 11.9. This affects an unknown part of the file general/wiki/cp/ct/delete.php. The manipulation of the argument PROJIDSTR leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2023-6276

Tongda OA 2017 up to 11.9 contains a SQL injection in delete.php due to manipulation of the PROJ_ID_STR parameter. The vulnerability can be triggered remotely and has been publicly disclosed. Upgrading to version 11.10 addresses this issue. Affected component is general/wiki/cp/ct/delete.php; the...