TONGDA Office Anywhere SQL Injection Vulnerability

TONGDA Office Anywhere is a collaborative office OA system. A SQL injection vulnerability exists in TONGDA Office Anywhere 2017 version 11.10 and earlier versions, which stems from an incorrect operation of the parameter DELETESTR that can lead to sql injection...

PT-2023-32839

Name of the Vulnerable Software and Affected Versions Tongda OA versions 2017 up to 11.9 Description A critical issue affects an unknown functionality of the file general/work plan/manage/delete all.php. The manipulation of the DELETE STR argument leads to sql injection. The attack can be launche...

CVE-2022-25406

Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in deletequery.php via the DELETESTR parameter...

PT-2022-17267

Name of the Vulnerable Software and Affected Versions Tongda2000 version 11.10 Description A SQL injection issue was found in delete.php via the DELETE STR parameter. This allows for potential manipulation of database queries. Recommendations For Tongda2000 version 11.10, as a temporary workaroun...

PT-2022-17268

Name of the Vulnerable Software and Affected Versions Tongda2000 version 11.10 Description A SQL injection issue was found in change box.php via the DELETE STR parameter. This allows for potential manipulation of database queries. Recommendations For Tongda2000 version 11.10, consider restricting...

PT-2022-17269

Name of the Vulnerable Software and Affected Versions Tongda2000 version 11.10 Description A SQL injection issue was found in delete query.php via the DELETE STR parameter. Recommendations For Tongda2000 version 11.10, consider restricting access to the delete query.php file or avoiding the use o...