CVE-2023-5030: TONGDA2000 Tongda Office Anywhere

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

A vulnerability has been found in Tongda OA up to 11.10 and classified as critical. This vulnerability affects unknown code of the file general/hr/recruit/plan/delete.php. The manipulation of the argument PLAN_ID leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-239872.

Affected products

• TONGDA2000 Tongda Office Anywhere: up to and including 11.10

Published 2023-09-17. Last modified 2026-06-17.