CVE-2023-7180
published 2023-12-30CVE-2023-7180: A vulnerability has been found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this vulnerability is an unknown functionality of the file…
PriorityP426medium4.3CVSS 3.1
AVNACLPRLUINSUCLINAN
EPSS
0.51%
39.5th percentile
A vulnerability has been found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this vulnerability is an unknown functionality of the file general/project/proj/delete.php. The manipulation of the argument PROJ_ID_STR leads to sql injection. The exploit has been disclosed to the public and may be used. Upgrading to version 11.10 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-249367. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| tongda | oa_2017 | — | — |
| tongda | oa_2017 | — | — |
| tongda | oa_2017 | — | — |
| tongda | oa_2017 | — | — |
| tongda | oa_2017 | — | — |
| tongda | oa_2017 | — | — |
| tongda | oa_2017 | — | — |
| tongda | oa_2017 | — | — |
| tongda | oa_2017 | — | — |
| tongda | oa_2017 | — | — |
| tongda2000 | office_anywhere | < 11.10 | 11.10 |
CVSS provenance
nvdv3.14.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
nvdv2.05.2MEDIUMAV:A/AC:L/Au:S/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
ManageEngine ADManager Plus Build < 7183 - Recovery Password Disclosure
exploitdb·2024-02-13·CVSS 6.5
CVE-2023-31492 [MEDIUM] ManageEngine ADManager Plus Build < 7183 - Recovery Password Disclosure
ManageEngine ADManager Plus Build < 7183 - Recovery Password Disclosure
---
# Exploit Title: ManageEngine ADManager Plus Build < 7183 - Recovery Password Disclosure
# Exploit Author: Metin Yunus Kandemir
# Vendor Homepage: https://www.manageengine.com/
# Software Link: https://www.manageengine.com/products/ad-manager/
# Details: https://docs.unsafe-inline.com/0day/manageengine-admanager-plus-build-less-than-7183-recovery-password-disclosure-cve-2023-31492
# Details: https://github.com/passtheticket/vulnerability-research/blob/main/manage-engine-apps/admanager-recovery-password-disclosure.md
# Version: ADManager Plus Build < 7183
# Tested against: Build 7180
# CVE: CVE-2023-31492
import argparse
import requests
import urllib3
import sys
"""
The Recovery Settings helps you configure the
Nuclei
ManageEngine ADManager Plus - Command Injection
nuclei·CVSS 7.2
CVE-2023-29084 [HIGH] ManageEngine ADManager Plus - Command Injection
ManageEngine ADManager Plus - Command Injection
Zoho ManageEngine ADManager Plus through 7180 allows for authenticated users to exploit command injection via Proxy settings.
Template:
id: CVE-2023-29084
info:
name: ManageEngine ADManager Plus - Command Injection
author: rootxharsh,iamnoooob,pdresearch
severity: high
description: |
Zoho ManageEngine ADManager Plus through 7180 allows for authenticated users to exploit command injection via Proxy settings.
impact: |
Successful exploitation of this vulnerability could lead to remote code execution, unauthorized access to sensitive information, or complete compromise of the target system.
remediation: |
Apply the latest security patch or update provided by the vendor to fix the command injection vulnerability in ManageEngine ADManager Plus
No writeups or analysis indexed.
2023-12-30
Published