CVE-2023-5023

Tongda OA 2017 contains a SQL injection in the vulnerable file general/hr/manage/staff_relatives/delete.php via manipulation of the RELATIVES_ID parameter. The issue, described as critical (CVSS 3.1/8.8 from NVD), can affect confidentiality, integrity, and availability and is tied to an openly di...