CVE-2023-4166

A vulnerability has been found in Tongda OA and classified as critical. This vulnerability affects unknown code of the file general/system/sealmanage/dianju/deletelog.php. The manipulation of the argument DELETESTR leads to sql injection. The exploit has been disclosed to the public and may be...

Sql injection

A vulnerability has been found in Tongda OA and classified as critical. This vulnerability affects unknown code of the file general/system/sealmanage/dianju/deletelog.php. The manipulation of the argument DELETESTR leads to sql injection. The exploit has been disclosed to the public and may be...

CVE-2023-4166 Tongda OA delete_log.php sql injection

A vulnerability has been found in Tongda OA and classified as critical. This vulnerability affects unknown code of the file general/system/sealmanage/dianju/deletelog.php. The manipulation of the argument DELETESTR leads to sql injection. The exploit has been disclosed to the public and may be...

CVE-2023-4166 Tongda OA delete_log.php sql injection

A vulnerability has been found in Tongda OA and classified as critical. This vulnerability affects unknown code of the file general/system/sealmanage/dianju/deletelog.php. The manipulation of the argument DELETESTR leads to sql injection. The exploit has been disclosed to the public and may be...

CVE-2023-4166

CVE-2023-4166 describes a SQL injection in Tongda OA, exposed via DELETE_STR in general/system/seal_manage/dianju/delete_log.php. The vulnerability affects Tongda OA prior to version 11.10, where user-controlled input in DELETE_STR leads to unauthorized database access. Exploitation status is ind...

CVE-2023-4165

A vulnerability, which was classified as critical, was found in Tongda OA. This affects an unknown part of the file general/system/sealmanage/iweboffice/deleteseal.php. The manipulation of the argument DELETESTR leads to sql injection. The exploit has been disclosed to the public and may be used...

Sql injection

A vulnerability, which was classified as critical, was found in Tongda OA. This affects an unknown part of the file general/system/sealmanage/iweboffice/deleteseal.php. The manipulation of the argument DELETESTR leads to sql injection. The exploit has been disclosed to the public and may be used...

CVE-2023-4165 Tongda OA delete_seal.php sql injection

A vulnerability, which was classified as critical, was found in Tongda OA. This affects an unknown part of the file general/system/sealmanage/iweboffice/deleteseal.php. The manipulation of the argument DELETESTR leads to sql injection. The exploit has been disclosed to the public and may be used...

CVE-2023-4165 Tongda OA delete_seal.php sql injection

A vulnerability, which was classified as critical, was found in Tongda OA. This affects an unknown part of the file general/system/sealmanage/iweboffice/deleteseal.php. The manipulation of the argument DELETESTR leads to sql injection. The exploit has been disclosed to the public and may be used...

CVE-2023-4165

CVE-2023-4165 affects Tongda OA, specifically the file general/system/seal_manage/iweboffice/delete_seal.php. The vulnerability arises from manipulating the argument DELETE_STR , leading to a SQL injection . Public disclosures exist and the impact is described as enabling attacker access via netw...

PT-2023-28022 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA versions prior to 11.10 Description: A critical issue was found in Tongda OA, affecting the file general/system/seal manage/iweboffice/delete seal.php. The manipulation of the DELETE STR argument leads to sql injection. The issue ha...

PT-2023-28031 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA versions prior to 11.10 Description: A critical vulnerability has been found in Tongda OA, affecting the file general/system/seal manage/dianju/delete log.php. The manipulation of the DELETE STR argument leads to sql injection. The...

CVE-2023-38988

An issue in the delete function in the OaNotifyController class of jeesite v1.2.6 allows authenticated attackers to arbitrarily delete notifications created by Administrators...

PT-2023-26717 · Jeesite · Jeesite

Name of the Vulnerable Software and Affected Versions: jeesite version 1.2.6 Description: An issue in the delete function in the OaNotifyController class allows authenticated attackers to arbitrarily delete notifications created by Administrators. Recommendations: For jeesite version 1.2.6,...

jeesite 安全漏洞

Zhuo source software Jeesite is China's Zhuo source software company of a set of open source Java EE enterprise-class rapid development platform . The platform includes system permissions components, data permissions components, data dictionary components, core tools components, view manipulation...

CVE-2023-3826

A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /?r=recruit/resume/edit&op=status of the component Interview Handler. The manipulation of the argument resumeid leads to sql injection. The attack can...

CVE-2023-3826

A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /?r=recruit/resume/edit&op=status of the component Interview Handler. The manipulation of the argument resumeid leads to sql injection. The attack can...

Sql injection

A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /?r=recruit/resume/edit&op=status of the component Interview Handler. The manipulation of the argument resumeid leads to sql injection. The attack can...

CVE-2023-3826 IBOS OA Interview edit&op=status sql injection

A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /?r=recruit/resume/edit&op=status of the component Interview Handler. The manipulation of the argument resumeid leads to sql injection. The attack can...

CVE-2023-3826

CVE-2023-3826 affects IBOS OA 4.5.5 in the Interview Handler component, via the file path /?r=recruit/resume/edit&op=status where manipulating the resumeid parameter yields a SQL injection. The issue is exploitable remotely and can impact confidentiality, integrity, and availability as described ...