TONGDA Office Anywhere Cross-Site Scripting Vulnerability

TONGDA Office Anywhere is a collaborative office OA system. A cross-site scripting vulnerability exists in TONGDA Office Anywhere version 11.10, which stems from a cross-site scripting XSS vulnerability in the parameter OASUBWINDOW...

CVE-2023-5026: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in Tongda OA 11.10. Affected is an unknown function of the file /general/ipanel/menucode.php?MENUTYPE=FAV. The manipulation of the argument OASUBWINDOW leads to cross site scripting. It is possible to launch the attack remotely. The exploit...