Sql injection

A vulnerability, which was classified as critical, was found in Tongda OA. This affects an unknown part of the file general/system/sealmanage/iweboffice/deleteseal.php. The manipulation of the argument DELETESTR leads to sql injection. The exploit has been disclosed to the public and may be used...

CVE-2023-4165 Tongda OA delete_seal.php sql injection

A vulnerability, which was classified as critical, was found in Tongda OA. This affects an unknown part of the file general/system/sealmanage/iweboffice/deleteseal.php. The manipulation of the argument DELETESTR leads to sql injection. The exploit has been disclosed to the public and may be used...

CVE-2023-4165 Tongda OA delete_seal.php sql injection

A vulnerability, which was classified as critical, was found in Tongda OA. This affects an unknown part of the file general/system/sealmanage/iweboffice/deleteseal.php. The manipulation of the argument DELETESTR leads to sql injection. The exploit has been disclosed to the public and may be used...

CVE-2023-4165

CVE-2023-4165 affects Tongda OA, specifically the file general/system/seal_manage/iweboffice/delete_seal.php. The vulnerability arises from manipulating the argument DELETE_STR , leading to a SQL injection . Public disclosures exist and the impact is described as enabling attacker access via netw...

TONGDA Office Anywhere SQL Injection Vulnerability

TONGDA Office Anywhere is a collaborative office OA system. TONGDA Office Anywhere suffers from a SQL injection vulnerability that originates from a DELETESTR operation on the general/system/sealmanage/iweboffice/deleteseal.php page, which results in an SQL injection...

PT-2023-28022 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA versions prior to 11.10 Description: A critical issue was found in Tongda OA, affecting the file general/system/seal manage/iweboffice/delete seal.php. The manipulation of the DELETE STR argument leads to sql injection. The issue ha...

PT-2023-28031 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA versions prior to 11.10 Description: A critical vulnerability has been found in Tongda OA, affecting the file general/system/seal manage/dianju/delete log.php. The manipulation of the DELETE STR argument leads to sql injection. The...

CVE-2023-2738

A vulnerability classified as critical has been found in Tongda OA 11.10. This affects the function actionGetdata of the file GatewayController.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...

CVE-2023-2738

A vulnerability classified as critical has been found in Tongda OA 11.10. This affects the function actionGetdata of the file GatewayController.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...

Design/Logic Flaw

A vulnerability classified as critical has been found in Tongda OA 11.10. This affects the function actionGetdata of the file GatewayController.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...

CVE-2023-2738

Tongda OA 11.10 is affected by CVE-2023-2738 via the actionGetdata function in GatewayController.php, enabling unrestricted file upload. The issue can be exploited remotely and the exploit has been publicly disclosed. Connected sources also note that a practical workaround exists: temporarily dis...

CVE-2023-2738 Tongda OA GatewayController.php actionGetdata unrestricted upload

A vulnerability classified as critical has been found in Tongda OA 11.10. This affects the function actionGetdata of the file GatewayController.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...

TONGDA Office Anywhere 代码问题漏洞

TONGDA Office Anywhere is a collaborative office OA system. A code issue vulnerability exists in TONGDA Office Anywhere version 11.10, which stems from a problem with the function actionGetdata in the file GatewayController.php, which can lead to unrestricted uploads...

PT-2023-21085 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA version 11.10 Description: A critical vulnerability has been found in Tongda OA, affecting the actionGetdata function of the GatewayController.php file. This vulnerability leads to unrestricted upload and can be initiated remotely...

File upload vulnerability exists in Tongda OA (CNVD-2022-70712)

Tongda OA is a mobile intelligent office application. There is a file upload vulnerability in Tongda OA, which can be exploited by attackers to gain control of the server...

Tongda2000 SQL Injection Vulnerability

A SQL injection vulnerability exists in Tongda2000, a web-based intelligent office system from China Tongda, which originates from the dname parameter in the product's exportdata.php file that does not securely handle special characters in user input data. An attacker can execute malicious SQL...

Tongda2000 SQL Injection Vulnerability

Tongda2000 is a web-based intelligent office system from China Tongda Tongda.A security vulnerability exists in Tongda2000 v11.10, which allows attackers to attack via the DEVICELIST parameter in /mobileseal/getseal.php. No detailed vulnerability details are available at this time...

Beijing Tongda Zhicheng Technology Co., Ltd. Heart Tongda OA has file upload vulnerability (CNVD-2021-86805)

Xin Tongda OA is an OA office tool equipped with AI artificial intelligence. Beijing Tongda Zhicheng Technology Co. Xin Tongda OA has a file upload vulnerability, which can be exploited by attackers to gain control of the server...

SQL injection vulnerability exists in Tongda OA (CNVD-2021-73171)

OA Office Anywhere Network Intelligent Office System is a collaborative office automation software independently developed by Beijing Tongda Xinke Technology Co. There is a SQL injection vulnerability in Tongda OA, attackers can use the vulnerability to obtain sensitive information in the databas...

Directory Traversal Vulnerability in the Billing System of Shenzhen Baiwei Tongda Technology Co.

Shenzhen Baiwei Tongda Technology Co., Ltd. is committed to providing leading network solutions for Internet cafes, neighborhoods, hotels, businesses, and public Internet access places. Shenzhen Baiwei Tongda Technology Co., Ltd Baiwei cell billing system directory traversal vulnerability,...