Lucene search
+L

2 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/08 12:00 a.m.•3 views

CVE-2023-6611: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Tongda OA 2017 up to 11.9. It has been declared as critical. This vulnerability affects unknown code of the file pda/pad/email/delete.php. The manipulation of the argument EMAILID leads to sql injection. The exploit has been disclosed to the public and may be used...

7.5CVSS5.8AI score0.00643EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/12/08 12:00 a.m.•5 views

PT-2023-32714

Name of the Vulnerable Software and Affected Versions Tongda OA 2017 versions up to 11.9 Description A critical issue affects the file pda/pad/email/delete.php, where the manipulation of the EMAIL ID argument leads to sql injection. The exploit has been disclosed to the public. There is no...

7.5CVSS5.5AI score0.00643EPSS
SaveExploits1References8
Rows per page
Query Builder