CVE-2023-5023

Published September 17th, 2023

View on NVD ↗

CVSS v3

5.5

MEDIUM

CVSS v2

5.2

MEDIUM

Affected

PROJECT

Description

A vulnerability was found in Tongda OA 2017 and classified as critical. Affected by this issue is some unknown functionality of the file general/hr/manage/staff_relatives/delete.php. The manipulation of the argument RELATIVES_ID leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-239864.

RCEraser/cve

GitHub