CVE-2024-10598

Tongda OA versions 11.2–11.6 are affected by a vulnerability in the Annual Leave Handler’s file general/hr/setting/attendance/leave/data.php, caused by improper authorization. The issue allows remote access and exploitation, with public exploits disclosed. Remediation per PT security guidance: up...

TONGDA Office Anywhere SQL注入漏洞

TONGDA Office Anywhere is a collaborative office OA system. A SQL injection vulnerability exists in TONGDA Office Anywhere 2017 11.10 and earlier versions, which stems from an SQL injection in the parameter whererepeat...

TONGDA Office Anywhere 资源管理错误漏洞

TONGDA Office Anywhere is a collaborative office OA system. A resource management error vulnerability exists in TONGDA Office Anywhere 2017 11.7 and earlier versions that stems from resource consumption...

TONGDA Office Anywhere 授权问题漏洞

TONGDA Office Anywhere is a collaborative office OA system. An authorization issue vulnerability exists in TONGDA Office Anywhere versions 11.2 to 11.6, which arises from incorrect authorization...

TONGDA Office Anywhere SQL注入漏洞

TONGDA Office Anywhere is a collaborative office OA system. A SQL injection vulnerability exists in TONGDA Office Anywhere 2017 11.6 and earlier versions, which stems from SQL injection of the parameter appid...

PT-2024-16414 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA 2017 up to 11.10 Description: A critical issue has been found in Tongda OA, affecting some unknown processing of the file /pda/reportshop/record detail.php. The manipulation of the repid argument leads to SQL injection. The attack m...

PT-2024-16398 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA versions 2017 up to 11.10 Description: A critical issue has been found in Tongda OA, affecting an unknown functionality of the file /general/address/private/address/query/delete.php. The manipulation of the where repeat argument lea...

PT-2024-16415 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA versions 2017 up to 11.10 Description: A critical issue was found in the file /pda/reportshop/next detail.php, where the manipulation of the repid argument leads to sql injection. It is possible to launch the attack remotely. The...

PT-2024-16397 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA 2017 versions up to 11.6 Description: A critical issue was found in Tongda OA, affecting an unknown function of the file pda/appcenter/submenu.php. The manipulation of the appid argument leads to sql injection. It is possible to...

TONGDA Office Anywhere SQL注入漏洞

TONGDA Office Anywhere is a collaborative office OA system. A SQL injection vulnerability exists in TONGDA Office Anywhere 2017 11.9 and earlier versions, which originates from a SQL injection in the parameter dataSrc...

PT-2024-16396 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA 2017 up to 11.7 Description: A problematic issue has been found in Tongda OA, affecting some unknown processing of the file /inc/package static resources.php. This leads to resource consumption and can be initiated remotely. The iss...

PT-2024-16413 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA versions up to 11.10 Description: A critical vulnerability was found in Tongda OA, affecting the file /pda/workflow/check seal.php. The manipulation of the ID argument leads to SQL injection. The attack can be initiated remotely...

PT-2024-16395 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA versions 11.2 through 11.6 Description: A critical vulnerability was found in Tongda OA, affecting unknown code of the file general/hr/setting/attendance/leave/data.php of the component Annual Leave Handler. The manipulation leads t...

VulnCheck KEV: CVE-2023-4166

A vulnerability has been found in Tongda OA and classified as critical. This vulnerability affects unknown code of the file general/system/sealmanage/dianju/deletelog.php. The manipulation of the argument DELETESTR leads to sql injection. The exploit has been disclosed to the public and may be...

TONGDA Office Anywhere 安全漏洞

TONGDA Office Anywhere is a collaborative office OA system. A security vulnerability exists in TONGDA Office Anywhere v2023.12.30.1, which originates from an arbitrary file upload vulnerability in the file preview function, which can be exploited by an attacker to execute arbitrary code by...

CVE-2024-4903

A vulnerability was found in Tongda OA 2017. It has been declared as critical. This vulnerability affects unknown code of the file /general/meeting/manage/delete.php. The manipulation of the argument MIDSTR leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...

CVE-2024-4903 Tongda OA delete.php sql injection

A vulnerability was found in Tongda OA 2017. It has been declared as critical. This vulnerability affects unknown code of the file /general/meeting/manage/delete.php. The manipulation of the argument MIDSTR leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...

CVE-2024-4903

CVE-2024-4903 affects Tongda OA 2017. The vulnerability resides in the code path handling /general/meeting/manage/delete.php, where manipulation of the parameter M_ID_STR enables SQL injection. The issue is exploitable remotely and the exploit has been disclosed publicly, indicating active risk p...

CVE-2024-4903 Tongda OA delete.php sql injection

A vulnerability was found in Tongda OA 2017. It has been declared as critical. This vulnerability affects unknown code of the file /general/meeting/manage/delete.php. The manipulation of the argument MIDSTR leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...

TONGDA Office Anywhere SQL注入漏洞

TONGDA Office Anywhere is a collaborative office OA system. A SQL injection vulnerability exists in TONGDA Office Anywhere 2017, which stems from the fact that incorrect operation of the parameter MIDSTR can lead to sql injection...