CVE-2023-6607

A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical. Affected by this vulnerability is an unknown functionality of the file general/wiki/cp/manage/delete.php. The manipulation of the argument TERMIDSTR leads to sql injection. The exploit has been disclosed to t...

PT-2023-32711

Name of the Vulnerable Software and Affected Versions Tongda OA versions 2017 up to 11.10 Description A critical issue has been found in an unknown functionality of the file general/wiki/cp/manage/delete.php. The manipulation of the TERM ID STR argument leads to SQL injection. The issue has been...

Tongda OA SQL Injection Vulnerability

Tongda2000 is a web-based intelligent office system from China Tongda Tongda. Tongda OA 2017 11.10 and earlier versions suffer from a SQL injection vulnerability that originates from the presence of an unknown function in general/wiki/cp/manage/delete.php, which leads to SQL injection via the...

PT-2023-32493

Name of the Vulnerable Software and Affected Versions Tongda OA 2017 versions up to 11.9 Description A critical issue was found in the file general/wiki/cp/manage/lock.php, where the manipulation of the TERM ID STR argument leads to sql injection. The exploit has been disclosed to the public and...