Lucene search
K

5 matches found

OSV
OSV
added 2023/08/05 4:15 p.m.2 views

CVE-2023-4166

A vulnerability has been found in Tongda OA and classified as critical. This vulnerability affects unknown code of the file general/system/sealmanage/dianju/deletelog.php. The manipulation of the argument DELETESTR leads to sql injection. The exploit has been disclosed to the public and may be...

9.8CVSS5.5AI score0.87968EPSS
Exploits2References3
NVD
NVD
added 2023/08/05 4:15 p.m.9 views

CVE-2023-4166

A vulnerability has been found in Tongda OA and classified as critical. This vulnerability affects unknown code of the file general/system/sealmanage/dianju/deletelog.php. The manipulation of the argument DELETESTR leads to sql injection. The exploit has been disclosed to the public and may be...

9.8CVSS7AI score0.87968EPSS
Exploits2References3
Vulnrichment
Vulnrichment
added 2023/08/05 3:31 p.m.14 views

CVE-2023-4166 Tongda OA delete_log.php sql injection

A vulnerability has been found in Tongda OA and classified as critical. This vulnerability affects unknown code of the file general/system/sealmanage/dianju/deletelog.php. The manipulation of the argument DELETESTR leads to sql injection. The exploit has been disclosed to the public and may be...

5.5CVSS7.4AI score0.87968EPSS
Exploits2References3
Cvelist
Cvelist
added 2023/08/05 3:31 p.m.16 views

CVE-2023-4166 Tongda OA delete_log.php sql injection

A vulnerability has been found in Tongda OA and classified as critical. This vulnerability affects unknown code of the file general/system/sealmanage/dianju/deletelog.php. The manipulation of the argument DELETESTR leads to sql injection. The exploit has been disclosed to the public and may be...

5.5CVSS10AI score0.87968EPSS
Exploits2References3
CVE
CVE
added 2023/08/05 3:31 p.m.70 views

CVE-2023-4166

CVE-2023-4166 describes a SQL injection in Tongda OA, exposed via DELETE_STR in general/system/seal_manage/dianju/delete_log.php. The vulnerability affects Tongda OA prior to version 11.10, where user-controlled input in DELETE_STR leads to unauthorized database access. Exploitation status is ind...

9.8CVSS7AI score0.87968EPSS
Exploits2References3Affected Software1
Rows per page
Query Builder