通达OA CVE-2023-6053 SQL注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://cn-sec.com/archives/2242334.html
• https://cve.imfht.com/detail/CVE-2023-6053
• https://github.com/Conan0313/cve/blob/main/sql.md
• https://www.dptech.com/uploadfile/2023/1110/20231110022901948.pdf
• https://nvd.nist.gov/vuln/detail/CVE-2023-6053
• https://vuldb.com/?id=244874

Related Vulnerabilities

• 通达OA v11.7 delete_cascade.php SQL 注入漏洞
• 通达OA /general/reportshop/utils/upload.php 文件上传漏洞（CNVD-2021-21890）
• 通达OA delete_seal.php SQL 注入漏洞（CVE-2023-4165）
• 通达OA /pda/apps/report/getdata.php 文件上传漏洞
• 通达OA delete_log.php SQL 注入漏洞（CVE-2023-4166）
• tongda-handle-sqli: 通达OA handle SQL注入
• tongda-v11-getdata-rce: 通达OA v11.9 getdata 任意命令执行漏洞
• PoCCVE-2023-4166-2: 通达OA seal_manage SQL 注入