Lucene search
K

5 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 2:31 a.m.3 views

CVE-2023-7023

A vulnerability was found in Tongda OA 2017 up to 11.9. It has been rated as critical. Affected by this issue is some unknown functionality of the file general/vehicle/query/delete.php. The manipulation of the argument VUID leads to sql injection. The attack may be launched remotely. The exploit...

9.8CVSS7.2AI score0.00055EPSS
Exploits1References1
Prion
Prion
added 2023/12/21 2:15 a.m.19 views

Sql injection

A vulnerability was found in Tongda OA 2017 up to 11.9. It has been rated as critical. Affected by this issue is some unknown functionality of the file general/vehicle/query/delete.php. The manipulation of the argument VUID leads to sql injection. The attack may be launched remotely. The exploit...

6.5CVSS7.5AI score0.00055EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/12/21 2:0 a.m.11 views

CVE-2023-7023 Tongda OA 2017 delete.php sql injection

A vulnerability was found in Tongda OA 2017 up to 11.9. It has been rated as critical. Affected by this issue is some unknown functionality of the file general/vehicle/query/delete.php. The manipulation of the argument VUID leads to sql injection. The attack may be launched remotely. The exploit...

6.5CVSS7.4AI score0.00055EPSS
Exploits1References3
CVE
CVE
added 2023/12/21 2:0 a.m.56 views

CVE-2023-7023

Tongda OA 2017 up to 11.9 contains a SQL injection in general/vehicle/query/delete.php via the VU_ID parameter. The issue can be exploited remotely, and the exploit has been publicly disclosed. Upgrading to version 11.10 addresses the vulnerability. Affected product/version: Tongda OA 2017 (≤11.9...

9.8CVSS7.2AI score0.00055EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2023/12/21 2:0 a.m.15 views

CVE-2023-7023 Tongda OA 2017 delete.php sql injection

A vulnerability was found in Tongda OA 2017 up to 11.9. It has been rated as critical. Affected by this issue is some unknown functionality of the file general/vehicle/query/delete.php. The manipulation of the argument VUID leads to sql injection. The attack may be launched remotely. The exploit...

6.5CVSS9.7AI score0.00055EPSS
Exploits1References3
Rows per page
Query Builder