CVE-2023-6885

A vulnerability was found in Tongda OA 2017 up to 11.10. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file general/vote/manage/delete.php. The manipulation of the argument DELETESTR leads to sql injection. The exploit has been disclosed to th...

CVE-2023-6885

creationtimestamp| type| source ---|---|--- 2023-12-20 11:18:00+00:00| seen| https://t.me/ctinow/156878 2024-01-11 18:31:28+00:00| seen| https://t.me/ctinow/166719...

CVE-2023-6885

Tongda OA 2017 up to 11.10 contains a SQL injection in file general/vote/manage/delete.php via the DELETE_STR parameter. Multiple sources (CVE-2023-6885 and related feeds) confirm this vulnerability affects Tongda OA 2017 up to version 11.10, with the exploit disclosed publicly. The root cause is...