56 matches found
CVE-2022-23902
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in exportdata.php via the dname parameter...
CVE-2022-24206
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in /mobileseal/getseal.php via the DEVICELIST parameter...
CVE-2022-24206
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in /mobileseal/getseal.php via the DEVICELIST parameter...
CVE-2022-24206
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in /mobileseal/getseal.php via the DEVICELIST parameter...
CVE-2022-23902
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in exportdata.php via the dname parameter...
Sql injection
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in exportdata.php via the dname parameter...
Sql injection
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in /mobileseal/getseal.php via the DEVICELIST parameter...
CVE-2022-24206
CVE-2022-24206 affects Tongda2000 v11.10, with a SQL injection in the mobile_seal/get_seal.php endpoint via the DEVICE_LIST parameter. Documented impact indicates high severity (CVSS 3.1: 9.8, network vector, no user interaction, high confidentiality/integrity/availability impact). Root cause is ...
CVE-2022-24206
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in /mobileseal/getseal.php via the DEVICELIST parameter...
CVE-2022-23902
CVE-2022-23902 affects Tongda2000 v11.10, with a SQL injection in export_data.php via the d_name parameter. Multiple connected sources (Red Hat, CNVD, NVD mirrors, PRION, CVE lists) corroborate that user-supplied values for d_name are not securely handled, enabling SQL statements to be executed. ...
CVE-2022-23902
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in exportdata.php via the dname parameter...
Tongda2000 SQL注入漏洞
A SQL injection vulnerability exists in Tongda2000, a web-based intelligent office system from China Tongda, which originates from the dname parameter in the product's exportdata.php file that does not securely handle special characters in user input data. An attacker can execute malicious SQL...
PT-2022-16538 · Unknown · Tongda2000
Name of the Vulnerable Software and Affected Versions: Tongda2000 version 11.10 Description: A SQL injection issue was found in the /mobile seal/get seal.php endpoint via the DEVICE LIST parameter. This allows for potential exploitation of the software. Recommendations: For Tongda2000 version...
Tongda2000 安全漏洞
Tongda2000 is a web-based intelligent office system from China Tongda Tongda.A security vulnerability exists in Tongda2000 v11.10, which allows attackers to attack via the DEVICELIST parameter in /mobileseal/getseal.php. No detailed vulnerability details are available at this time...
PT-2022-16322 · Unknown · Tongda2000
Name of the Vulnerable Software and Affected Versions: Tongda2000 version 11.10 Description: A SQL injection issue was found in export data.php via the d name parameter. This allows for potential exploitation. Recommendations: For Tongda2000 version 11.10, consider restricting access to the expor...