Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 2:05 a.m.•29 views

CVE-2023-6607

A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical. Affected by this vulnerability is an unknown functionality of the file general/wiki/cp/manage/delete.php. The manipulation of the argument TERMIDSTR leads to sql injection. The exploit has been disclosed to t...

7.5CVSS6AI score0.00716EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2023/12/08 2:15 p.m.•22 views

CVE-2023-6607

A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical. Affected by this vulnerability is an unknown functionality of the file general/wiki/cp/manage/delete.php. The manipulation of the argument TERMIDSTR leads to sql injection. The exploit has been disclosed to t...

7.5CVSS6.1AI score0.00716EPSS
SaveExploits1References3
Prion
Prion
•added 2023/12/08 2:15 p.m.•34 views

Sql injection

A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical. Affected by this vulnerability is an unknown functionality of the file general/wiki/cp/manage/delete.php. The manipulation of the argument TERMIDSTR leads to sql injection. The exploit has been disclosed to t...

5.2CVSS7.5AI score0.00716EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2023/12/08 2:00 p.m.•74 views

CVE-2023-6607

CVE-2023-6607 affects Tongda OA 2017 up to 11.10. The vulnerability is a SQL injection in general/wiki/cp/manage/delete.php where manipulating TERM_ID_STR enables injection. The exploit has been disclosed publicly and vendor response is not documented in the provided sources. No remediation detai...

7.5CVSS6.1AI score0.00716EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/08 12:00 a.m.•9 views

CVE-2023-6607: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical. Affected by this vulnerability is an unknown functionality of the file general/wiki/cp/manage/delete.php. The manipulation of the argument TERMIDSTR leads to sql injection. The exploit has been disclosed to t...

7.5CVSS6.1AI score0.00716EPSS
SaveExploits1References2
Rows per page
Query Builder