CVE-2023-5030

A vulnerability has been found in Tongda OA up to 11.10 and classified as critical. This vulnerability affects unknown code of the file general/hr/recruit/plan/delete.php. The manipulation of the argument PLAN_ID leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-239872.

• CWE-89

• https://github.com/husterdjx/cve/blob/main/sql1.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.239872Third Party Advisory
• https://vuldb.com/?id.239872Third Party Advisory
• https://github.com/husterdjx/cve/blob/main/sql1.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.239872Third Party Advisory
• https://vuldb.com/?id.239872Third Party Advisory

Published

Sep 17, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-50291Insufficiently Protected Credentials vulnerability in Apache…7.5
• CVE-2023-50292Incorrect Permission Assignment for Critical Resource, Impro…7.5
• CVE-2023-50293Rejected reason: This is unused.
• CVE-2023-50294The App Settings (/admin/app) page in GROWI versions prior t…6.5
• CVE-2023-50297Open redirect vulnerability in PowerCMS (6 Series, 5 Series,…6.1
• CVE-2023-50298Exposure of Sensitive Information to an Unauthorized Actor v…7.5
• CVE-2023-50300IBM Transformation Extender Advanced 10.0.1 could allow …6.2
• CVE-2023-50301IBM Transformation Extender Advanced 10.0.1 stores potential…4.4
• CVE-2023-50303IBM InfoSphere Information Server 11.7 is vulnerable to cros…6.1
• CVE-2023-50304IBM Engineering Requirements Management DOORS Web Access 9.7…8.2
• CVE-2023-50305IBM Engineering Requirements Management DOORS 9.7.2.7 does n…5.1
• CVE-2023-50306IBM Common Licensing 9.0 could allow a local user to enumera…3.3