Tongda OA 2017 delete.php sql injection
CVE-2023-6276

7.5HIGH

Key Information:

Vendor
Tongda
Status
OA 2017
Vendor
CVE Published:
24 November 2023

Summary

A SQL Injection vulnerability has been discovered in Tongda OA versions 2017 and 11.9, primarily affecting the file located at general/wiki/cp/ct/delete.php. This vulnerability occurs due to improper handling of the PROJ_ID_STR parameter, enabling remote attackers to execute arbitrary SQL commands. The public disclosure of the exploit increases the urgency for organizations using affected versions to upgrade to at least version 11.10 to mitigate potential attacks.

Affected Version(s)

OA 2017 11.0

OA 2017 11.1

OA 2017 11.2

References

https://vuldb.com/?id.246105
vdb-entrytechnical-description
https://vuldb.com/?ctiid.246105
signaturepermissions-required
https://github.com/YXuanZ1216/cve/blob/main/sql.md
exploit

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

YXuanZ (VulDB User)
.
CVE-2023-6276 : Tongda OA 2017 delete.php sql injection | SecurityVulnerability.io