2 matches found
CVE-2023-6611: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Tongda OA 2017 up to 11.9. It has been declared as critical. This vulnerability affects unknown code of the file pda/pad/email/delete.php. The manipulation of the argument EMAILID leads to sql injection. The exploit has been disclosed to the public and may be used...
7.5CVSS5.8AI score0.00643EPSS
SaveExploits1References2
PT-2023-32714
Name of the Vulnerable Software and Affected Versions Tongda OA 2017 versions up to 11.9 Description A critical issue affects the file pda/pad/email/delete.php, where the manipulation of the EMAIL ID argument leads to sql injection. The exploit has been disclosed to the public. There is no...
7.5CVSS5.5AI score0.00643EPSS
SaveExploits1References8
20