CVE-2023-6607

A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical. Affected by this vulnerability is an unknown functionality of the file general/wiki/cp/manage/delete.php. The manipulation of the argument TERM_ID_STR leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-247243. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-89

• https://github.com/willchen0011/cve/blob/main/sql.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.247243Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.247243Third Party Advisory, VDB Entry
• https://github.com/willchen0011/cve/blob/main/sql.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.247243Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.247243Third Party Advisory, VDB Entry

Published

Dec 8, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-6601A flaw was found in FFmpeg's HLS demuxer. This vulnerability…4.7
• CVE-2023-6602A flaw was found in FFmpeg's TTY Demuxer. This vulnerability…5.3
• CVE-2023-6603A flaw was found in FFmpeg's HLS playlist parsing. This vuln…7.5
• CVE-2023-6604A flaw was found in FFmpeg. This vulnerability allows unexpe…5.3
• CVE-2023-6605A flaw was found in FFmpeg's DASH playlist support. This vul…7.2
• CVE-2023-6606An out-of-bounds read vulnerability was found in smbCalcSize…7.1
• CVE-2023-6608A vulnerability was found in Tongda OA 2017 up to 11.9 and c…7.5
• CVE-2023-6609A vulnerability was found in osCommerce 4. It has been class…6.1
• CVE-2023-6610An out-of-bounds read vulnerability was found in smb2_dump_d…7.1
• CVE-2023-6611A vulnerability was found in Tongda OA 2017 up to 11.9. It h…7.5
• CVE-2023-6612A vulnerability was found in Totolink X5000R 9.1.0cu.2300_B2…9.8
• CVE-2023-6613A vulnerability classified as problematic has been found in …4.8