Lucene search
+L

541 matches found

NVD
NVD
added 2023/12/16 11:15 p.m.30 views

CVE-2023-6885

A vulnerability was found in Tongda OA 2017 up to 11.10. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file general/vote/manage/delete.php. The manipulation of the argument DELETESTR leads to sql injection. The exploit has been disclosed to th...

9.8CVSS0.0066EPSS
SaveExploits1References3
OSV
OSV
added 2023/12/16 11:15 p.m.12 views

CVE-2023-6885

A vulnerability was found in Tongda OA 2017 up to 11.10. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file general/vote/manage/delete.php. The manipulation of the argument DELETESTR leads to sql injection. The exploit has been disclosed to th...

9.8CVSS6.1AI score0.0066EPSS
SaveExploits1References3
Prion
Prion
added 2023/12/16 11:15 p.m.22 views

Sql injection

A vulnerability was found in Tongda OA 2017 up to 11.10. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file general/vote/manage/delete.php. The manipulation of the argument DELETESTR leads to sql injection. The exploit has been disclosed to th...

5.2CVSS7.5AI score0.0066EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2023/12/16 10:31 p.m.63 views

CVE-2023-6885

Tongda OA 2017 up to 11.10 contains a SQL injection in file general/vote/manage/delete.php via the DELETE_STR parameter. Multiple sources (CVE-2023-6885 and related feeds) confirm this vulnerability affects Tongda OA 2017 up to version 11.10, with the exploit disclosed publicly. The root cause is...

9.8CVSS7.8AI score0.0066EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/12/16 10:31 p.m.41 views

CVE-2023-6885 Tongda OA 2017 delete.php sql injection

A vulnerability was found in Tongda OA 2017 up to 11.10. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file general/vote/manage/delete.php. The manipulation of the argument DELETESTR leads to sql injection. The exploit has been disclosed to th...

5.5CVSS9.8AI score0.0066EPSS
SaveExploits1References3
NVD
NVD
added 2023/12/08 3:15 p.m.28 views

CVE-2023-6611

A vulnerability was found in Tongda OA 2017 up to 11.9. It has been declared as critical. This vulnerability affects unknown code of the file pda/pad/email/delete.php. The manipulation of the argument EMAILID leads to sql injection. The exploit has been disclosed to the public and may be used...

7.5CVSS0.00643EPSS
SaveExploits1References3
OSV
OSV
added 2023/12/08 3:15 p.m.9 views

CVE-2023-6611

A vulnerability was found in Tongda OA 2017 up to 11.9. It has been declared as critical. This vulnerability affects unknown code of the file pda/pad/email/delete.php. The manipulation of the argument EMAILID leads to sql injection. The exploit has been disclosed to the public and may be used...

7.5CVSS5.5AI score0.00643EPSS
SaveExploits1References3
NVD
NVD
added 2023/12/08 3:15 p.m.29 views

CVE-2023-6608

A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this issue is some unknown functionality of the file general/notify/manage/delete.php. The manipulation of the argument DELETESTR leads to sql injection. The exploit has been disclosed to the public and...

7.5CVSS0.00643EPSS
SaveExploits1References3
OSV
OSV
added 2023/12/08 3:15 p.m.11 views

CVE-2023-6608

A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this issue is some unknown functionality of the file general/notify/manage/delete.php. The manipulation of the argument DELETESTR leads to sql injection. The exploit has been disclosed to the public and...

7.5CVSS5.5AI score0.00643EPSS
SaveExploits1References3
Prion
Prion
added 2023/12/08 3:15 p.m.23 views

Sql injection

A vulnerability was found in Tongda OA 2017 up to 11.9. It has been declared as critical. This vulnerability affects unknown code of the file pda/pad/email/delete.php. The manipulation of the argument EMAILID leads to sql injection. The exploit has been disclosed to the public and may be used...

5.2CVSS7.7AI score0.00643EPSS
SaveExploits1References3Affected Software2
Prion
Prion
added 2023/12/08 3:15 p.m.22 views

Sql injection

A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this issue is some unknown functionality of the file general/notify/manage/delete.php. The manipulation of the argument DELETESTR leads to sql injection. The exploit has been disclosed to the public and...

5.2CVSS7.5AI score0.00643EPSS
SaveExploits1References3Affected Software2
Cvelist
Cvelist
added 2023/12/08 3:00 p.m.40 views

CVE-2023-6611 Tongda OA 2017 delete.php sql injection

A vulnerability was found in Tongda OA 2017 up to 11.9. It has been declared as critical. This vulnerability affects unknown code of the file pda/pad/email/delete.php. The manipulation of the argument EMAILID leads to sql injection. The exploit has been disclosed to the public and may be used...

5.5CVSS8AI score0.00643EPSS
SaveExploits1References3
CVE
CVE
added 2023/12/08 3:00 p.m.46 views

CVE-2023-6611

Tongda OA 2017 up to v11.9 contains a SQL injection in pda/pad/email/delete.php via the EMAIL_ID parameter. Exploit disclosed publicly. Upgrading to v11.10 addresses the issue. Affected products are Tongda OA 2017 (≤11.9); root cause is improper input handling in that PHP file.

7.5CVSS6.8AI score0.00643EPSS
SaveExploits1References3Affected Software2
Cvelist
Cvelist
added 2023/12/08 2:31 p.m.33 views

CVE-2023-6608 Tongda OA 2017 delete.php sql injection

A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this issue is some unknown functionality of the file general/notify/manage/delete.php. The manipulation of the argument DELETESTR leads to sql injection. The exploit has been disclosed to the public and...

5.5CVSS7.9AI score0.00643EPSS
SaveExploits1References3
CVE
CVE
added 2023/12/08 2:31 p.m.65 views

CVE-2023-6608

CVE-2023-6608 affects Tongda OA 2017 up to 11.9. The vulnerability is a SQL injection in the file general/notify/manage/delete.php caused by manipulation of the DELETE_STR argument. The issue has been publicly disclosed and may be exploited. Upgrading to version 11.10 addresses the vulnerability....

7.5CVSS6.6AI score0.00643EPSS
SaveExploits1References3Affected Software2
NVD
NVD
added 2023/12/08 2:15 p.m.24 views

CVE-2023-6607

A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical. Affected by this vulnerability is an unknown functionality of the file general/wiki/cp/manage/delete.php. The manipulation of the argument TERMIDSTR leads to sql injection. The exploit has been disclosed to t...

7.5CVSS0.00716EPSS
SaveExploits1References3
OSV
OSV
added 2023/12/08 2:15 p.m.9 views

CVE-2023-6607

A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical. Affected by this vulnerability is an unknown functionality of the file general/wiki/cp/manage/delete.php. The manipulation of the argument TERMIDSTR leads to sql injection. The exploit has been disclosed to t...

7.5CVSS5.6AI score0.00716EPSS
SaveExploits1References3
Prion
Prion
added 2023/12/08 2:15 p.m.26 views

Sql injection

A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical. Affected by this vulnerability is an unknown functionality of the file general/wiki/cp/manage/delete.php. The manipulation of the argument TERMIDSTR leads to sql injection. The exploit has been disclosed to t...

5.2CVSS7.5AI score0.00716EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2023/12/08 2:00 p.m.33 views

CVE-2023-6607 Tongda OA 2017 delete.php sql injection

A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical. Affected by this vulnerability is an unknown functionality of the file general/wiki/cp/manage/delete.php. The manipulation of the argument TERMIDSTR leads to sql injection. The exploit has been disclosed to t...

5.5CVSS8AI score0.00716EPSS
SaveExploits1References3
CVE
CVE
added 2023/12/08 2:00 p.m.54 views

CVE-2023-6607

CVE-2023-6607 affects Tongda OA 2017 up to 11.10. The vulnerability is a SQL injection in general/wiki/cp/manage/delete.php where manipulating TERM_ID_STR enables injection. The exploit has been disclosed publicly and vendor response is not documented in the provided sources. No remediation detai...

7.5CVSS6.7AI score0.00716EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder