CVE-2023-5023

Tongda OA 2017 contains a SQL injection in the vulnerable file general/hr/manage/staff_relatives/delete.php via manipulation of the RELATIVES_ID parameter. The issue, described as critical (CVSS 3.1/8.8 from NVD), can affect confidentiality, integrity, and availability and is tied to an openly di...

CVE-2023-5023: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Tongda OA 2017 and classified as critical. Affected by this issue is some unknown functionality of the file general/hr/manage/staffrelatives/delete.php. The manipulation of the argument RELATIVESID leads to sql injection. The exploit has been disclosed to the public a...