CVE-2023-6611

Tongda OA 2017 up to v11.9 contains a SQL injection in pda/pad/email/delete.php via the EMAIL_ID parameter. Exploit disclosed publicly. Upgrading to v11.10 addresses the issue. Affected products are Tongda OA 2017 (≤11.9); root cause is improper input handling in that PHP file.

PT-2023-32714

Name of the Vulnerable Software and Affected Versions Tongda OA 2017 versions up to 11.9 Description A critical issue affects the file pda/pad/email/delete.php, where the manipulation of the EMAIL ID argument leads to sql injection. The exploit has been disclosed to the public. There is no...

CVE-2023-6611: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Tongda OA 2017 up to 11.9. It has been declared as critical. This vulnerability affects unknown code of the file pda/pad/email/delete.php. The manipulation of the argument EMAILID leads to sql injection. The exploit has been disclosed to the public and may be used...