CVE-2024-0938

A vulnerability, which was classified as critical, was found in Tongda OA 2017 up to 11.9. This affects an unknown part of the file /general/email/inbox/deletewebmail.php. The manipulation of the argument WEBBODYIDSTR leads to sql injection. The exploit has been disclosed to the public and may be...

CVE-2024-0938 Tongda OA 2017 delete_webmail.php sql injection

A vulnerability, which was classified as critical, was found in Tongda OA 2017 up to 11.9. This affects an unknown part of the file /general/email/inbox/deletewebmail.php. The manipulation of the argument WEBBODYIDSTR leads to sql injection. The exploit has been disclosed to the public and may be...

CVE-2024-0938

CVE-2024-0938 affects Tongda OA 2017 up to v11.9. The vulnerability is an SQL injection in /general/email/inbox/delete_webmail.php, caused by improper handling of the WEBBODY_ID_STR parameter. This can lead to unauthorized data exposure or modification with network access (no user interaction req...