Lucene search
+L

541 matches found

Cvelist
Cvelist
added 2023/10/26 12:00 p.m.31 views

CVE-2023-5780 Tongda OA 2017 delete.php sql injection

A vulnerability classified as critical was found in Tongda OA 2017 11.10. This vulnerability affects unknown code of the file general/system/approvecenter/flowguide/flowtype/setprint/delete.php. The manipulation of the argument DELETESTR leads to sql injection. The attack can be initiated remotel...

7.5CVSS9.8AI score0.00723EPSS
SaveExploits1References3
CVE
CVE
added 2023/10/26 12:00 p.m.78 views

CVE-2023-5780

Tongda OA 2017 11.10 is affected by a SQL injection in the file general/system/approve_center/flow_guide/flow_type/set_print/delete.php via the DELETE_STR parameter. The vulnerability is exploitable remotely and public exploit information exists. Affected component/file: set_print/delete.php; con...

9.8CVSS8.8AI score0.00723EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2023/10/26 12:00 a.m.11 views

TONGDA Office Anywhere SQL Injection Vulnerability

TONGDA Office Anywhere is a collaborative office OA system. A security vulnerability exists in TONGDA Office Anywhere version 11.10, which originates from a SQL injection vulnerability in the parameter deleteSTR in the file setprint/delete.php...

9.8CVSS7.9AI score0.00723EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/10/26 12:00 a.m.15 views

PT-2023-32322 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA 2017 versions up to 11.9 Description: A critical issue has been found in an unknown functionality of the file general/system/approve center/flow sort/flow/delete.php. The manipulation of the id/sort parent argument leads to sql...

7.5CVSS7.1AI score0.00542EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2023/10/26 12:00 a.m.10 views

PT-2023-32320 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA 2017 version 11.10 Description: A critical issue has been found in Tongda OA, affecting the function DELETE STR of the file general/system/res manage/monitor/delete webmail.php. This issue leads to SQL injection and can be initiated...

9.8CVSS6.9AI score0.0066EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2023/10/26 12:00 a.m.13 views

PT-2023-32319 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA version 2017 11.10 Description: A critical vulnerability was found in Tongda OA, affecting the file general/system/approve center/flow guide/flow type/set print/delete.php. The manipulation of the DELETE STR argument leads to SQL...

9.8CVSS7.9AI score0.00723EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2023/10/26 12:00 a.m.10 views

TONGDA Office Anywhere SQL Injection Vulnerability

TONGDA Office Anywhere is a collaborative office OA system. A SQL injection vulnerability exists in TONGDA Office Anywhere V11.10 and earlier versions, v2017, which originates from the presence of an unknown function in general/system/approvecenter/flowsort/flow/delete.php, which can cause a SQL...

7.5CVSS8AI score0.00542EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/10/26 12:00 a.m.16 views

PT-2023-32321 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA 2017 up to 11.10 Description: A critical vulnerability was found in the General News component of Tongda OA. The issue affects an unknown function of the file /manage/delete query.php. The manipulation of the NEWS ID argument leads ...

9.8CVSS6AI score0.0066EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2023/10/26 12:00 a.m.10 views

TONGDA Office Anywhere SQL Injection Vulnerability

TONGDA Office Anywhere is a collaborative office OA system. A security vulnerability exists in TONGDA Office Anywhere 2017 version 11.10, which originates from a SQL injection vulnerability in the function DELETESTR in the file DELETEwebmail.php...

9.8CVSS7.9AI score0.0066EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/10/26 12:00 a.m.10 views

TONGDA Office Anywhere SQL Injection Vulnerability

TONGDA Office Anywhere is a collaborative office OA system. A SQL injection vulnerability exists in TONGDA Office Anywhere V11.10 and earlier, v2017, which originates from an unknown function /manage/deletequery.php in the component General News, which causes an SQL injection via the parameter...

9.8CVSS8AI score0.0066EPSS
SaveExploits1References4
NVD
NVD
added 2023/10/20 9:15 p.m.26 views

CVE-2023-5682

A vulnerability has been found in Tongda OA 2017 and classified as critical. This vulnerability affects unknown code of the file general/hr/training/record/delete.php. The manipulation of the argument RECORDID leads to sql injection. The exploit has been disclosed to the public and may be used...

9.8CVSS6.8AI score0.00668EPSS
SaveExploits1References3
OSV
OSV
added 2023/10/20 9:15 p.m.8 views

CVE-2023-5682

A vulnerability has been found in Tongda OA 2017 and classified as critical. This vulnerability affects unknown code of the file general/hr/training/record/delete.php. The manipulation of the argument RECORDID leads to sql injection. The exploit has been disclosed to the public and may be used...

9.8CVSS5.5AI score0.00668EPSS
SaveExploits1References3
Prion
Prion
added 2023/10/20 9:15 p.m.27 views

Sql injection

A vulnerability has been found in Tongda OA 2017 and classified as critical. This vulnerability affects unknown code of the file general/hr/training/record/delete.php. The manipulation of the argument RECORDID leads to sql injection. The exploit has been disclosed to the public and may be used...

5.2CVSS9.5AI score0.00668EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2023/10/20 8:31 p.m.85 views

CVE-2023-5682

CVE-2023-5682 affects Tongda OA 2017, specifically the file general/hr/training/record/delete.php. The vulnerability is a SQL injection caused by unsafely handling the RECORD_ID argument, enabling attackers to manipulate queries. Public exploit exposure is indicated in multiple sources. Impact is...

9.8CVSS6.8AI score0.00668EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/20 8:31 p.m.14 views

CVE-2023-5682 Tongda OA delete.php sql injection

A vulnerability has been found in Tongda OA 2017 and classified as critical. This vulnerability affects unknown code of the file general/hr/training/record/delete.php. The manipulation of the argument RECORDID leads to sql injection. The exploit has been disclosed to the public and may be used...

5.5CVSS7.4AI score0.00668EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2023/10/20 8:31 p.m.40 views

CVE-2023-5682 Tongda OA delete.php sql injection

A vulnerability has been found in Tongda OA 2017 and classified as critical. This vulnerability affects unknown code of the file general/hr/training/record/delete.php. The manipulation of the argument RECORDID leads to sql injection. The exploit has been disclosed to the public and may be used...

5.5CVSS9.8AI score0.00668EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/10/20 12:00 a.m.15 views

PT-2023-32258 · Tongda · Tongda Oa 2017

Name of the Vulnerable Software and Affected Versions: Tongda OA 2017 versions prior to 11.10 Description: A critical vulnerability has been found in Tongda OA 2017, affecting the file general/hr/training/record/delete.php. The manipulation of the RECORD ID argument leads to sql injection. The...

9.8CVSS6.2AI score0.00668EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2023/10/20 12:00 a.m.9 views

Tongda OA 2017 SQL Injection Vulnerability

Tongda2000 is a web-based intelligent office system from China Tongda Tongda. A security vulnerability exists in Tongda OA 2017 version, which originates from the existence of an unknown part of the file general/hr/training/record/delete.php, which leads to sql injection via the parameter RECORDI...

9.8CVSS7.4AI score0.00668EPSS
SaveExploits1References4
OSV
OSV
added 2023/10/10 6:15 p.m.11 views

CVE-2023-5497

A vulnerability classified as critical has been found in Tongda OA 2017 11.10. Affected is an unknown function of the file general/hr/salary/welfaremanage/delete.php. The manipulation of the argument WELFAREID leads to sql injection. It is possible to launch the attack remotely. The exploit has...

8.8CVSS5.7AI score0.00668EPSS
SaveExploits1References3
NVD
NVD
added 2023/10/10 6:15 p.m.19 views

CVE-2023-5497

A vulnerability classified as critical has been found in Tongda OA 2017 11.10. Affected is an unknown function of the file general/hr/salary/welfaremanage/delete.php. The manipulation of the argument WELFAREID leads to sql injection. It is possible to launch the attack remotely. The exploit has...

8.8CVSS7.3AI score0.00668EPSS
SaveExploits1References3
Rows per page
Query Builder