Medium severity5.5NVD Advisory· Published Sep 29, 2023· Updated Jun 17, 2026

CVE-2023-5267

Description

A vulnerability has been found in Tongda OA 2017 and classified as critical. This vulnerability affects unknown code of the file general/hr/recruit/hr_pool/delete.php. The manipulation of the argument EXPERT_ID leads to sql injection. The exploit has been disclosed to the public and may be used. Upgrading to version 11.10 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-240880.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Tongda/OAllm-fuzzy
Range: 2017
Tongda/OA 2017cpe-rescue
Range: n/a

Patches

Vulnerability mechanics

References

github.com/kpz-wm/cve/blob/main/sql.mdnvdExploitThird Party Advisory
vuldb.comnvdPermissions RequiredThird Party AdvisoryVDB Entry
vuldb.comnvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000