Tongda2000 SQL Injection Vulnerability

A SQL injection vulnerability exists in Tongda2000, a web-based intelligent office system from China Tongda, which originates from the d_name parameter in the product’s export_data.php file that does not securely handle special characters in user input data. An attacker can execute malicious SQL statements through this vulnerability.