Tongda OA 2017 delete_all.php sql injection
CVE-2023-7022

6.3MEDIUM

Key Information:

Vendor: Tongda
Status: Oa 2017
Vendor: CVE Published:; 21 December 2023

Badges

👾 Exploit Exists🟡 Public PoC

Summary

A vulnerability exists in Tongda OA 2017 affecting versions up to 11.9, specifically within the file general/work_plan/manage/delete_all.php. This vulnerability allows for SQL injection through manipulation of the DELETE_STR argument. The exploit can be executed remotely, posing a significant risk to data integrity and security. The vendor has been notified but has not responded to the disclosure. This situation raises concerns about the ongoing security of the software, emphasizing the need for immediate attention by users to safeguard their systems.

Affected Version(s)

OA 2017 11.0

OA 2017 11.1

OA 2017 11.2

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2023-7022 - Proof of Concept

References

https://vuldb.com/?id.248569

vdb-entrytechnical-description

https://vuldb.com/?ctiid.248569

signaturepermissions-required

https://github.com/willchen0011/cve/blob/main/sql3.md

exploit

CVSS V3.1

Score:

6.3

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

CVSS V3.0