CVE-2023-4166

CVE-2023-4166 fofa：通达OA python3 CVE-2023-4165.py -h python3 CVE-2023-4165.py -u 单个url目标文件 python3 CVE-2023-4165.py -f url.txt その後、アドレスを確認してください。...

CVE-2023-4166

creationtimestamp| type| source ---|---|--- 2023-10-10 15:06:55+00:00| published-proof-of-concept| https://t.me/CNArsenal/857 2026-09-18 04:00:07+00:00| seen| Telegram/BkbNhDHFRzkVF5tbtY3Kddn9VxORT3FDboj5Rtp-tRAsvg 2026-09-19 00:00:38+00:00| exploited|...

CVE-2023-4166

CVE-2023-4166 describes a SQL injection in Tongda OA, exposed via DELETE_STR in general/system/seal_manage/dianju/delete_log.php. The vulnerability affects Tongda OA prior to version 11.10, where user-controlled input in DELETE_STR leads to unauthorized database access. Exploitation status is ind...