CVE-2023-5267

A vulnerability has been found in Tongda OA 2017 and classified as critical. This vulnerability affects unknown code of the file general/hr/recruit/hrpool/delete.php. The manipulation of the argument EXPERTID leads to sql injection. The exploit has been disclosed to the public and may be used...

Sql injection

A vulnerability has been found in Tongda OA 2017 and classified as critical. This vulnerability affects unknown code of the file general/hr/recruit/hrpool/delete.php. The manipulation of the argument EXPERTID leads to sql injection. The exploit has been disclosed to the public and may be used...

CVE-2023-5267

The CVE-2023-5267 entry concerns Tongda OA 2017, where the vulnerability exists in the file general/hr/recruit/hr_pool/delete.php. The root cause is manipulation of the EXPERT_ID parameter that enables SQL injection. Public exploit details are noted, and upgrading to Tongda OA version 11.10 addre...