CVE-2023-6276

A vulnerability classified as critical has been found in Tongda OA 2017 up to 11.9. This affects an unknown part of the file general/wiki/cp/ct/delete.php. The manipulation of the argument PROJ_ID_STR leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 11.10 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-246105 was assigned to this vulnerability.

• CWE-89

• https://github.com/YXuanZ1216/cve/blob/main/sql.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.246105Third Party Advisory
• https://vuldb.com/?id.246105Third Party Advisory
• https://github.com/YXuanZ1216/cve/blob/main/sql.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.246105Third Party Advisory
• https://vuldb.com/?id.246105Third Party Advisory

Published

Nov 24, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-6270A flaw was found in the ATA over Ethernet (AoE) driver in th…7
• CVE-2023-6271The Backup Migration WordPress plugin before 1.3.6 stores in…7.5
• CVE-2023-6272The Theme My Login 2FA WordPress plugin before 1.2 does not …9.8
• CVE-2023-6273Permission management vulnerability in the module for disabl…5.3
• CVE-2023-6274A vulnerability was found in Byzoro Smart S80 up to 20231108…9.8
• CVE-2023-6275A vulnerability was found in TOTVS Fluig Platform 1.6.x/1.7.…6.1
• CVE-2023-6277An out-of-memory flaw was found in libtiff. Passing a crafte…6.5
• CVE-2023-6278The Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Ka…6.1
• CVE-2023-6279The Woostify Sites Library WordPress plugin before 1.4.8 doe…7.1
• CVE-2023-6280An XXE (XML External Entity) vulnerability has been detected…7.5
• CVE-2023-6282IceHrm 23.0.0.OS does not sufficiently encode user-controlle…6.1
• CVE-2023-6287Sensitive data exposure in Webconf in Tribe29 Checkmk Applia…5.5