Tongda OA 2017 delete.php sql injection
CVE-2023-6276

6.3MEDIUM

Key Information:

Vendor: Tongda
Status: Oa 2017
Vendor: CVE Published:; 24 November 2023

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2023-6276?

A SQL Injection vulnerability has been discovered in Tongda OA versions 2017 and 11.9, primarily affecting the file located at general/wiki/cp/ct/delete.php. This vulnerability occurs due to improper handling of the PROJ_ID_STR parameter, enabling remote attackers to execute arbitrary SQL commands. The public disclosure of the exploit increases the urgency for organizations using affected versions to upgrade to at least version 11.10 to mitigate potential attacks.

Affected Version(s)

OA 2017 11.0

OA 2017 11.1

OA 2017 11.2

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2023-6276 - Proof of Concept

References

https://vuldb.com/?id.246105

vdb-entrytechnical-description

https://vuldb.com/?ctiid.246105

signaturepermissions-required

https://github.com/YXuanZ1216/cve/blob/main/sql.md

exploit

CVSS V3.1

Score:

6.3

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

CVSS V3.0