219 matches found
CVE-2023-5783 Tongda OA 2017 delete.php sql injection
A vulnerability has been found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this vulnerability is an unknown functionality of the file general/system/approvecenter/flowsort/flow/delete.php. The manipulation of the argument id/sortparent leads to sql injection. The attack c...
CVE-2023-5783 Tongda OA 2017 delete.php sql injection
A vulnerability has been found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this vulnerability is an unknown functionality of the file general/system/approvecenter/flowsort/flow/delete.php. The manipulation of the argument id/sortparent leads to sql injection. The attack c...
Sql injection
A vulnerability has been found in Tongda OA 2017 and classified as critical. This vulnerability affects unknown code of the file general/hr/training/record/delete.php. The manipulation of the argument RECORDID leads to sql injection. The exploit has been disclosed to the public and may be used...
CVE-2023-5682
CVE-2023-5682 affects Tongda OA 2017, specifically the file general/hr/training/record/delete.php. The vulnerability is a SQL injection caused by unsafely handling the RECORD_ID argument, enabling attackers to manipulate queries. Public exploit exposure is indicated in multiple sources. Impact is...
CVE-2023-5497
A vulnerability classified as critical has been found in Tongda OA 2017 11.10. Affected is an unknown function of the file general/hr/salary/welfaremanage/delete.php. The manipulation of the argument WELFAREID leads to sql injection. It is possible to launch the attack remotely. The exploit has...
Sql injection
A vulnerability classified as critical has been found in Tongda OA 2017 11.10. Affected is an unknown function of the file general/hr/salary/welfaremanage/delete.php. The manipulation of the argument WELFAREID leads to sql injection. It is possible to launch the attack remotely. The exploit has...
CVE-2023-5497 Tongda OA 2017 delete.php sql injection
A vulnerability classified as critical has been found in Tongda OA 2017 11.10. Affected is an unknown function of the file general/hr/salary/welfaremanage/delete.php. The manipulation of the argument WELFAREID leads to sql injection. It is possible to launch the attack remotely. The exploit has...
CVE-2023-5298
CVE-2023-5298 : Tongda OA 2017 contains a SQL injection in the file general/hr/recruit/requirements/delete.php via manipulation of the REQUIREMENTS_ID parameter. The issue is validated across multiple sources (e.g., Red Hat, CVE listings, PT Security, CNVD). Impact is described as critical; upgra...
CVE-2023-5298 Tongda OA 2017 delete.php sql injection
A vulnerability was found in Tongda OA 2017. It has been rated as critical. Affected by this issue is some unknown functionality of the file general/hr/recruit/requirements/delete.php. The manipulation of the argument REQUIREMENTSID leads to sql injection. The exploit has been disclosed to the...
Sql injection
A vulnerability classified as critical was found in Tongda OA 2017. Affected by this vulnerability is an unknown functionality of the file general/hr/recruit/recruitment/delete.php. The manipulation of the argument RECRUITMENTID leads to sql injection. The attack can be launched remotely. The...
CVE-2023-5267
A vulnerability has been found in Tongda OA 2017 and classified as critical. This vulnerability affects unknown code of the file general/hr/recruit/hrpool/delete.php. The manipulation of the argument EXPERTID leads to sql injection. The exploit has been disclosed to the public and may be used...
CVE-2023-5265
A vulnerability, which was classified as critical, has been found in Tongda OA 2017. Affected by this issue is some unknown functionality of the file general/hr/manage/stafftransfer/delete.php. The manipulation of the argument TRANSFERID leads to sql injection. The exploit has been disclosed to t...
Sql injection
A vulnerability has been found in Tongda OA 2017 and classified as critical. This vulnerability affects unknown code of the file general/hr/recruit/hrpool/delete.php. The manipulation of the argument EXPERTID leads to sql injection. The exploit has been disclosed to the public and may be used...
CVE-2023-5267 Tongda OA 2017 delete.php sql injection
A vulnerability has been found in Tongda OA 2017 and classified as critical. This vulnerability affects unknown code of the file general/hr/recruit/hrpool/delete.php. The manipulation of the argument EXPERTID leads to sql injection. The exploit has been disclosed to the public and may be used...
CVE-2023-5265 Tongda OA 2017 delete.php sql injection
A vulnerability, which was classified as critical, has been found in Tongda OA 2017. Affected by this issue is some unknown functionality of the file general/hr/manage/stafftransfer/delete.php. The manipulation of the argument TRANSFERID leads to sql injection. The exploit has been disclosed to t...
CVE-2023-5261 Tongda OA 2017 delete.php sql injection
A vulnerability, which was classified as critical, was found in Tongda OA 2017. Affected is an unknown function of the file general/hr/manage/stafftitleevaluation/delete.php. The manipulation of the argument EVALUATIONID leads to sql injection. The exploit has been disclosed to the public and may...
PT-2023-31988 · Tongda · Tongda Oa 2017
Name of the Vulnerable Software and Affected Versions: Tongda OA 2017 versions prior to 11.10 Description: A critical vulnerability has been found in Tongda OA 2017, affecting the file general/hr/recruit/hr pool/delete.php. The manipulation of the EXPERT ID argument leads to sql injection. The...
Tongda OA SQL Injection Vulnerability
Tongda2000 is a web-based intelligent office system from China Tongda Tongda. Tongda OA 2017 suffers from a SQL injection vulnerability that originates from the parameter EVALUATIONID in the file general/hr/manage/stafftitleevaluation/delete.php that can lead to SQL injection...