Lucene search
+L

4 matches found

NVD
NVD
•added 2023/09/29 3:15 p.m.•41 views

CVE-2023-5267

A vulnerability has been found in Tongda OA 2017 and classified as critical. This vulnerability affects unknown code of the file general/hr/recruit/hrpool/delete.php. The manipulation of the argument EXPERTID leads to sql injection. The exploit has been disclosed to the public and may be used...

9.8CVSS6.9AI score0.00888EPSS
SaveExploits1References3
Prion
Prion
•added 2023/09/29 3:15 p.m.•29 views

Sql injection

A vulnerability has been found in Tongda OA 2017 and classified as critical. This vulnerability affects unknown code of the file general/hr/recruit/hrpool/delete.php. The manipulation of the argument EXPERTID leads to sql injection. The exploit has been disclosed to the public and may be used...

5.2CVSS9.6AI score0.00888EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2023/09/29 3:00 p.m.•99 views

CVE-2023-5267

The CVE-2023-5267 entry concerns Tongda OA 2017, where the vulnerability exists in the file general/hr/recruit/hr_pool/delete.php. The root cause is manipulation of the EXPERT_ID parameter that enables SQL injection. Public exploit details are noted, and upgrading to Tongda OA version 11.10 addre...

9.8CVSS6AI score0.00888EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/29 12:00 a.m.•4 views

CVE-2023-5267: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Tongda OA 2017 and classified as critical. This vulnerability affects unknown code of the file general/hr/recruit/hrpool/delete.php. The manipulation of the argument EXPERTID leads to sql injection. The exploit has been disclosed to the public and may be used...

9.8CVSS6AI score0.00888EPSS
SaveExploits1References2
Rows per page
Query Builder