CVE-2024-4903

A vulnerability was found in Tongda OA 2017. It has been declared as critical. This vulnerability affects unknown code of the file /general/meeting/manage/delete.php. The manipulation of the argument MIDSTR leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...

CVE-2024-4903 Tongda OA delete.php sql injection

A vulnerability was found in Tongda OA 2017. It has been declared as critical. This vulnerability affects unknown code of the file /general/meeting/manage/delete.php. The manipulation of the argument MIDSTR leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...

CVE-2024-4903 Tongda OA delete.php sql injection

A vulnerability was found in Tongda OA 2017. It has been declared as critical. This vulnerability affects unknown code of the file /general/meeting/manage/delete.php. The manipulation of the argument MIDSTR leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...

CVE-2024-4903

CVE-2024-4903 affects Tongda OA 2017. The vulnerability resides in the code path handling /general/meeting/manage/delete.php, where manipulation of the parameter M_ID_STR enables SQL injection. The issue is exploitable remotely and the exploit has been disclosed publicly, indicating active risk p...

CVE-2024-4903: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Tongda OA 2017. It has been declared as critical. This vulnerability affects unknown code of the file /general/meeting/manage/delete.php. The manipulation of the argument MIDSTR leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...

TONGDA Office Anywhere SQL注入漏洞

TONGDA Office Anywhere is a collaborative office OA system. A SQL injection vulnerability exists in TONGDA Office Anywhere 2017, which stems from the fact that incorrect operation of the parameter MIDSTR can lead to sql injection...

PT-2024-33321

Name of the Vulnerable Software and Affected Versions Tongda OA version 2017 Description A critical issue has been identified, affecting the file /general/meeting/manage/delete.php. The manipulation of the M ID STR argument leads to SQL injection. This issue can be exploited remotely. The exploit...

CVE-2024-25320

Tongda OA v2017 and up to v11.9 was discovered to contain a SQL injection vulnerability via the $AFFID parameter at /affair/delete.php...

CVE-2024-25320

Tongda OA v2017 and up to v11.9 was discovered to contain a SQL injection vulnerability via the $AFFID parameter at /affair/delete.php...

Sql injection

Tongda OA v2017 and up to v11.9 was discovered to contain a SQL injection vulnerability via the $AFFID parameter at /affair/delete.php...

CVE-2024-25320

Tongda OA v2017 and up to v11.9 was discovered to contain a SQL injection vulnerability via the $AFFID parameter at /affair/delete.php...

CVE-2024-25320: Improper Neutralization of Special Elements used in an SQL Command

Tongda OA v2017 and up to v11.9 was discovered to contain a SQL injection vulnerability via the $AFFID parameter at /affair/delete.php...

CVE-2024-25320

Tongda OA v2017–v11.9 is reported to contain a SQL injection vulnerability in the /affair/delete.php endpoint via the $AFF_ID parameter. Affected component: server-side PHP logic handling the parameter. Impact is severe (CVE-2024-25320, CVSS v3.1: 9.8, Confidentiality/Integrity/Availability all H...

PT-2024-20888 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA versions v2017 through v11.9 Description: The issue is related to a SQL injection vulnerability. It can be exploited via the $AFF ID parameter at the "/affair/delete.php" API endpoint. Recommendations: For Tongda OA versions v2017...

CVE-2024-25320

Tongda OA v2017 and up to v11.9 was discovered to contain a SQL injection vulnerability via the $AFFID parameter at /affair/delete.php...

TONGDA Office Anywhere Security Breach

TONGDA Office Anywhere is a collaborative office OA system. A security vulnerability exists in TONGDA Office Anywhere v2017 11.9 and earlier versions, which originates from a SQL injection vulnerability in the file /affair/delete.php...

CVE-2024-1252

A vulnerability classified as critical was found in Tongda OA 2017 up to 11.9. Affected by this vulnerability is an unknown functionality of the file /general/attendance/manage/askduty/delete.php. The manipulation of the argument ASKDUTYID leads to sql injection. The exploit has been disclosed to...

CVE-2024-1252

A vulnerability classified as critical was found in Tongda OA 2017 up to 11.9. Affected by this vulnerability is an unknown functionality of the file /general/attendance/manage/askduty/delete.php. The manipulation of the argument ASKDUTYID leads to sql injection. The exploit has been disclosed to...

Sql injection

A vulnerability classified as critical was found in Tongda OA 2017 up to 11.9. Affected by this vulnerability is an unknown functionality of the file /general/attendance/manage/askduty/delete.php. The manipulation of the argument ASKDUTYID leads to sql injection. The exploit has been disclosed to...

CVE-2024-1252 Tongda OA 2017 delete.php sql injection

A vulnerability classified as critical was found in Tongda OA 2017 up to 11.9. Affected by this vulnerability is an unknown functionality of the file /general/attendance/manage/askduty/delete.php. The manipulation of the argument ASKDUTYID leads to sql injection. The exploit has been disclosed to...