CVE-2023-6611

Tongda OA 2017 up to v11.9 contains a SQL injection in pda/pad/email/delete.php via the EMAIL_ID parameter. Exploit disclosed publicly. Upgrading to v11.10 addresses the issue. Affected products are Tongda OA 2017 (≤11.9); root cause is improper input handling in that PHP file.