CVSS 3.1 Score 6.3 of 10 (medium)


Published Oct 10, 2023
Updated: Apr 11, 2024


A critical vulnerability, identified as CVE-2023-5497, has been discovered in Tongda OA 2017 version 11.10. The flaw resides in an unspecified function of the file "delete.php" within the "welfare_manage" module. Exploiting this vulnerability allows for remote SQL injection attacks by manipulating the "WELFARE_ID" argument. The exploit has been publicly disclosed, increasing the risk of exploitation. The affected products are t0WDd6 and t0WDd5. It is recommended to remediate this vulnerability by applying the latest security patches or updates provided by the vendor to mitigate potential risks to an organization's confidentiality, integrity, and availability.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-5497 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options