CVE-2024-0938: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in Tongda OA 2017 up to 11.9. This affects an unknown part of the file /general/email/inbox/deletewebmail.php. The manipulation of the argument WEBBODYIDSTR leads to sql injection. The exploit has been disclosed to the public and may be...

TONGDA Office Anywhere SQL Injection Vulnerability

TONGDA Office Anywhere is a collaborative office OA system. A SQL injection vulnerability exists in TONGDA Office Anywhere 2017 version 11.9 and earlier versions, which stems from an incorrect operation of the parameter WEBBODYIDSTR that can lead to SQL injection...

PT-2024-15923

Name of the Vulnerable Software and Affected Versions Tongda OA 2017 versions up to 11.9 Description A critical issue was found in Tongda OA 2017, affecting an unknown part of the file /general/email/inbox/delete webmail.php. The manipulation of the WEBBODY ID STR argument leads to sql injection...

CVE-2023-7180

A vulnerability has been found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this vulnerability is an unknown functionality of the file general/project/proj/delete.php. The manipulation of the argument PROJIDSTR leads to sql injection. The exploit has been disclosed to the...

CVE-2023-7180

A vulnerability has been found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this vulnerability is an unknown functionality of the file general/project/proj/delete.php. The manipulation of the argument PROJIDSTR leads to sql injection. The exploit has been disclosed to the...

Sql injection

A vulnerability has been found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this vulnerability is an unknown functionality of the file general/project/proj/delete.php. The manipulation of the argument PROJIDSTR leads to sql injection. The exploit has been disclosed to the...

CVE-2023-7180 Tongda OA 2017 delete.php sql injection

A vulnerability has been found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this vulnerability is an unknown functionality of the file general/project/proj/delete.php. The manipulation of the argument PROJIDSTR leads to sql injection. The exploit has been disclosed to the...

CVE-2023-7180

CVE-2023-7180 affects Tongda OA 2017 up to 11.9. The vulnerability exists in the file general/project/proj/delete.php where manipulating the PROJ_ID_STR parameter allows SQL injection. Public exploit information is indicated, and upgrading to version 11.10 is said to address the issue. The issue ...

CVE-2023-7180 Tongda OA 2017 delete.php sql injection

A vulnerability has been found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this vulnerability is an unknown functionality of the file general/project/proj/delete.php. The manipulation of the argument PROJIDSTR leads to sql injection. The exploit has been disclosed to the...

PT-2023-32926

Name of the Vulnerable Software and Affected Versions Tongda OA 2017 versions up to 11.9 Description A critical issue has been found in Tongda OA 2017, affecting an unknown functionality of the file general/project/proj/delete.php. The manipulation of the PROJ ID STR argument leads to sql...

CVE-2023-7180: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this vulnerability is an unknown functionality of the file general/project/proj/delete.php. The manipulation of the argument PROJIDSTR leads to sql injection. The exploit has been disclosed to the...

CVE-2023-7023

A vulnerability was found in Tongda OA 2017 up to 11.9. It has been rated as critical. Affected by this issue is some unknown functionality of the file general/vehicle/query/delete.php. The manipulation of the argument VUID leads to sql injection. The attack may be launched remotely. The exploit...

CVE-2023-7022

A vulnerability was found in Tongda OA 2017 up to 11.9. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file general/workplan/manage/deleteall.php. The manipulation of the argument DELETESTR leads to sql injection. The attack can be launched...

CVE-2023-7022

A vulnerability was found in Tongda OA 2017 up to 11.9. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file general/workplan/manage/deleteall.php. The manipulation of the argument DELETESTR leads to sql injection. The attack can be launched...

CVE-2023-7023

A vulnerability was found in Tongda OA 2017 up to 11.9. It has been rated as critical. Affected by this issue is some unknown functionality of the file general/vehicle/query/delete.php. The manipulation of the argument VUID leads to sql injection. The attack may be launched remotely. The exploit...

Sql injection

A vulnerability was found in Tongda OA 2017 up to 11.9. It has been rated as critical. Affected by this issue is some unknown functionality of the file general/vehicle/query/delete.php. The manipulation of the argument VUID leads to sql injection. The attack may be launched remotely. The exploit...

Sql injection

A vulnerability was found in Tongda OA 2017 up to 11.9. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file general/workplan/manage/deleteall.php. The manipulation of the argument DELETESTR leads to sql injection. The attack can be launched...

CVE-2023-7023 Tongda OA 2017 delete.php sql injection

A vulnerability was found in Tongda OA 2017 up to 11.9. It has been rated as critical. Affected by this issue is some unknown functionality of the file general/vehicle/query/delete.php. The manipulation of the argument VUID leads to sql injection. The attack may be launched remotely. The exploit...

CVE-2023-7023

Tongda OA 2017 up to 11.9 contains a SQL injection in general/vehicle/query/delete.php via the VU_ID parameter. The issue can be exploited remotely, and the exploit has been publicly disclosed. Upgrading to version 11.10 addresses the vulnerability. Affected product/version: Tongda OA 2017 (≤11.9...

CVE-2023-7023 Tongda OA 2017 delete.php sql injection

A vulnerability was found in Tongda OA 2017 up to 11.9. It has been rated as critical. Affected by this issue is some unknown functionality of the file general/vehicle/query/delete.php. The manipulation of the argument VUID leads to sql injection. The attack may be launched remotely. The exploit...