56 matches found
CVE-2022-25405
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in changebox.php via the DELETESTR parameter...
CVE-2022-25406
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in deletequery.php via the DELETESTR parameter...
CVE-2022-25406
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in deletequery.php via the DELETESTR parameter...
CVE-2022-25406
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in deletequery.php via the DELETESTR parameter...
CVE-2022-25404
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in delete.php via the DELETESTR parameter...
Sql injection
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in deletequery.php via the DELETESTR parameter...
Sql injection
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in delete.php via the DELETESTR parameter...
Sql injection
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in changebox.php via the DELETESTR parameter...
Tongda2000 SQL注入漏洞
Tongda2000 is a web-based intelligent office system from Tongda, China. a SQL injection vulnerability exists in Tongda2000 v11.10, which stems from the product's failure to effectively filter the special characters in the DELETESTR parameter of the delete.php file. An attacker could use this...
Tongda2000 SQL注入漏洞
Tongda2000 is a web-based intelligent office system from Tongda, China. a SQL injection vulnerability exists in Tongda2000 v11.10, which stems from the product's failure to effectively filter the special characters in the DELETESTR parameter data in the deletequery.php file. An attacker could...
Tongda2000 SQL注入漏洞
Tongda2000 is a web-based intelligent office system from Tongda, China. a SQL injection vulnerability exists in Tongda2000 v11.10, which stems from the product's failure to effectively filter the special characters in the DELETESTR parameter data in the changebox.php file. An attacker could use...
CVE-2022-25405
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in changebox.php via the DELETESTR parameter...
CVE-2022-25405
CVE-2022-25405 : Tongda2000 v11.10 has a SQL injection in change_box.php via the DELETE_STR parameter. The root cause is the product’s failure to adequately filter special characters in DELETE_STR. The vulnerability could allow execution of malicious SQL, per CNVD/CNNVD/Red Hat notes. Exploitatio...
CVE-2022-25404
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in delete.php via the DELETESTR parameter...
CVE-2022-25404
CVE-2022-25404 affects Tongda2000 v11.10, with a SQL injection in delete.php via the DELETE_STR parameter caused by insufficient input filtering. The issue is documented across multiple sources (CNVD/CNNVD/NVD Red Hat etc.) confirming an injectable SQL pathway in that specific version and file. N...
CVE-2022-25406
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in deletequery.php via the DELETESTR parameter...
CVE-2022-25406
CVE-2022-25406 affects Tongda2000 v11.10 and is caused by a SQL injection in delete_query.php via the DELETE_STR parameter (inadequate filtering of special characters). The vulnerability can lead to arbitrary SQL execution. Reported metrics: CVSS v2 base 7.5 (HIGH) and CVSS v3.1 base 9.8 (CRITICA...
Tongda2000 SQL Injection Vulnerability
A SQL injection vulnerability exists in Tongda2000, a web-based intelligent office system from China Tongda, which originates from the dname parameter in the product's exportdata.php file that does not securely handle special characters in user input data. An attacker can execute malicious SQL...
Tongda2000 SQL Injection Vulnerability
Tongda2000 is a web-based intelligent office system from China Tongda Tongda.A security vulnerability exists in Tongda2000 v11.10, which allows attackers to attack via the DEVICELIST parameter in /mobileseal/getseal.php. No detailed vulnerability details are available at this time...