CVE-2023-5285

A vulnerability classified as critical was found in Tongda OA 2017. Affected by this vulnerability is an unknown functionality of the file general/hr/recruit/recruitment/delete.php. The manipulation of the argument RECRUITMENTID leads to sql injection. The attack can be launched remotely. The...

CVE-2023-5285

creationtimestamp| type| source ---|---|--- 2023-09-30 00:38:05+00:00| seen| https://t.me/cibsecurity/71339 2025-07-23 21:02:24+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lunw55dk6d2c 2026-06-23 14:06:12+00:00| exploited|...

CVE-2023-5285

CVE-2023-5285 concerns Tongda OA 2017. The vulnerability affects the file general/hr/recruit/recruitment/delete.php where manipulation of the RECRUITMENT_ID parameter enables SQL injection. Exploitation can be performed remotely, and public disclosure of the exploit is noted in the sources. A fix...