CVE-2024-10617 Tongda OA check_seal.php sql injection

A vulnerability classified as critical was found in Tongda OA up to 11.10. This vulnerability affects unknown code of the file /pda/workflow/checkseal.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the publi...

CVE-2024-10617

CVE-2024-10617 concerns Tongda OA (up to version 11.10). The vulnerability is a SQL injection in the file /pda/workflow/check_seal.php caused by unsafely handling the ID parameter, enabling remote exploitation. Multiple sources confirm impact is significant (auth not required, network access) wit...

CVE-2024-10617 Tongda OA check_seal.php sql injection

A vulnerability classified as critical was found in Tongda OA up to 11.10. This vulnerability affects unknown code of the file /pda/workflow/checkseal.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the publi...

CVE-2024-10615

A vulnerability was found in Tongda OA 2017 up to 11.10. It has been rated as critical. Affected by this issue is some unknown functionality of the file /general/approvecenter/query/list/inputform/deletedataattach.php. The manipulation of the argument RUNID leads to sql injection. The attack may ...

CVE-2024-10615

A vulnerability was found in Tongda OA 2017 up to 11.10. It has been rated as critical. Affected by this issue is some unknown functionality of the file /general/approvecenter/query/list/inputform/deletedataattach.php. The manipulation of the argument RUNID leads to sql injection. The attack may ...

CVE-2024-10616 Tongda OA webSignSubmit.php sql injection

A vulnerability classified as critical has been found in Tongda OA up to 11.9. This affects an unknown part of the file /pda/workflow/webSignSubmit.php. The manipulation of the argument saleId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed t...

CVE-2024-10616 Tongda OA webSignSubmit.php sql injection

A vulnerability classified as critical has been found in Tongda OA up to 11.9. This affects an unknown part of the file /pda/workflow/webSignSubmit.php. The manipulation of the argument saleId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed t...

CVE-2024-10616

The CVE-2024-10616 entry concerns Tongda OA (up to 11.9) with a SQL injection in the saleId parameter of /pda/workflow/webSignSubmit.php. The vulnerability, exploitable remotely, is caused by improper handling of input leading to database query manipulation. Publicly disclosed exploit details are...

CVE-2024-10615 Tongda OA 2017 delete_data_attach.php sql injection

A vulnerability was found in Tongda OA 2017 up to 11.10. It has been rated as critical. Affected by this issue is some unknown functionality of the file /general/approvecenter/query/list/inputform/deletedataattach.php. The manipulation of the argument RUNID leads to sql injection. The attack may ...

CVE-2024-10615 Tongda OA 2017 delete_data_attach.php sql injection

A vulnerability was found in Tongda OA 2017 up to 11.10. It has been rated as critical. Affected by this issue is some unknown functionality of the file /general/approvecenter/query/list/inputform/deletedataattach.php. The manipulation of the argument RUNID leads to sql injection. The attack may ...

CVE-2024-10615

CVE-2024-10615 affects Tongda OA 2017 up to 11.10. The vulnerability is in /general/approve_center/query/list/input_form/delete_data_attach.php, where manipulating the RUN_ID parameter leads to SQL injection. Exploitation may be remote and the exploit has been disclosed publicly. Multiple sources...

CVE-2024-10602

A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this issue is some unknown functionality of the file /general/approvecenter/list/inputform/datapickerlink.php. The manipulation of the argument dataSrc leads to sql injection. The attack may be launched...

CVE-2024-10602

A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this issue is some unknown functionality of the file /general/approvecenter/list/inputform/datapickerlink.php. The manipulation of the argument dataSrc leads to sql injection. The attack may be launched...

TONGDA Office Anywhere SQL注入漏洞

TONGDA Office Anywhere is a collaborative office OA system from China Tongda TONGDA. TONGDA Office Anywhere suffers from a SQL injection vulnerability, which originates from a SQL injection vulnerability in the RUNID parameter of the /general/approvecenter/query/list/inputform/deletedataattach.ph...

TONGDA Office Anywhere SQL注入漏洞

TONGDA Office Anywhere is a collaborative office OA system from China Tongda TONGDA. TONGDA Office Anywhere suffers from a SQL injection vulnerability, which originates from the ID parameter of the /pda/workflow/checkseal.php page containing a SQL injection vulnerability...

TONGDA Office Anywhere SQL注入漏洞

TONGDA Office Anywhere is a collaborative office OA system of China Tongda TONGDA. TONGDA Office Anywhere suffers from a SQL injection vulnerability, which originates from a SQL injection vulnerability in the repid parameter of the /pda/reportshop/recorddetail.php page...

TONGDA Office Anywhere SQL注入漏洞

TONGDA Office Anywhere is a collaborative office OA system of China Tongda TONGDA. TONGDA Office Anywhere has a SQL injection vulnerability that originates from the RUNID parameter of the /pda/approvecenter/prcsinfo.php page that contains a SQL injection vulnerability...

TONGDA Office Anywhere SQL注入漏洞

TONGDA Office Anywhere is a collaborative office OA system of China Tongda TONGDA. TONGDA Office Anywhere suffers from a SQL injection vulnerability, which originates from a SQL injection vulnerability in the repid parameter of the /pda/reportshop/nextdetail.php page...

PT-2024-16435

Name of the Vulnerable Software and Affected Versions Tongda OA versions up to 11.10 Description A critical issue has been found in Tongda OA, affecting an unknown function of the file /pda/approve center/prcs info.php. The manipulation of the RUN ID argument leads to sql injection. It is possibl...

TONGDA Office Anywhere SQL注入漏洞

TONGDA Office Anywhere is a collaborative office OA system of China Tongda TONGDA. TONGDA Office Anywhere suffers from a SQL injection vulnerability, which originates from an SQL injection vulnerability in the saleId parameter of the /pda/workflow/webSignSubmit.php page...