通达OA delete_seal.php SQL注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• http://xxhc.yzu.edu.cn/info/1096/9918.htm
• https://github.com/izj007/wechat/blob/main/articles/%5B%E4%B8%8D%E5%A4%9F%E5%AE%89%E5%85%A8%5D-2023-8-7-CVE-2023-4165%EF%BC%9A%E9%80%9A%E8%BE%BEOA%20SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
• https://stack.chaitin.com/vuldb/detail/b42469a9-3551-434f-b5b5-ff4dbd7a9510
• https://www.ddpoc.com/DVB-2024-7215.html
• https://bbs.decoyit.com/thread-586-1-1.html
• https://a1andns.github.io/post/%E9%80%9A%E8%BE%BEOA11-7%E5%90%8E%E5%8F%B0sql%E6%B3%A8%E5%85%A5%E5%88%B0RCE%E5%A4%8D%E7%8E%B0
• https://wlaq.njupt.edu.cn/2023/0829/c14800a245709/page.htm
• https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/%E9%80%9A%E8%BE%BEoa/%E9%80%9A%E8%BE%BEoa%2011.7%20%E5%90%8E%E5%8F%B0sql%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E%26rce/
• https://www.ctfiot.com/129210.html
• https://avd.aliyun.com/detail?id=AVD-2023-4165
• https://www.venustech.com.cn/new_type/aqtg/20230807/26029.html
• https://cve.imfht.com/detail/CVE-2023-4165
• https://vuldb.com/vuln/236181
• https://rivers.chaitin.cn/blog/cq949d10lnechd242ph0
• https://www.cnblogs.com/dxmao/articles/17674294.html

Related Vulnerabilities

• 通达OA v11.7 delete_cascade.php SQL 注入漏洞
• 通达OA /general/reportshop/utils/upload.php 文件上传漏洞（CNVD-2021-21890）
• 通达OA delete_seal.php SQL 注入漏洞（CVE-2023-4165）
• 通达OA /pda/apps/report/getdata.php 文件上传漏洞
• 通达OA delete_log.php SQL 注入漏洞（CVE-2023-4166）
• tongda-handle-sqli: 通达OA handle SQL注入
• tongda-v11-getdata-rce: 通达OA v11.9 getdata 任意命令执行漏洞
• PoCCVE-2023-4166-2: 通达OA seal_manage SQL 注入