CVE-2023-5285: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Tongda OA 2017. Affected by this vulnerability is an unknown functionality of the file general/hr/recruit/recruitment/delete.php. The manipulation of the argument RECRUITMENTID leads to sql injection. The attack can be launched remotely. The...

CVE-2023-5261: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in Tongda OA 2017. Affected is an unknown function of the file general/hr/manage/stafftitleevaluation/delete.php. The manipulation of the argument EVALUATIONID leads to sql injection. The exploit has been disclosed to the public and may...

CVE-2023-5265: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in Tongda OA 2017. Affected by this issue is some unknown functionality of the file general/hr/manage/stafftransfer/delete.php. The manipulation of the argument TRANSFERID leads to sql injection. The exploit has been disclosed to t...

PT-2023-5589 · Tongda · Tongda Oa 2017

Name of the Vulnerable Software and Affected Versions: Tongda OA 2017 versions prior to 11.10 Description: A critical issue was found in Tongda OA 2017, affecting an unknown function of the file general/hr/manage/staff title evaluation/delete.php. The manipulation of the EVALUATION ID argument...

PT-2023-31986 · Tongda · Tongda Oa 2017

Name of the Vulnerable Software and Affected Versions: Tongda OA 2017 versions prior to 11.10 Description: A critical issue has been found in Tongda OA 2017, affecting some unknown functionality of the file general/hr/manage/staff transfer/delete.php. The manipulation of the TRANSFER ID argument...

Tongda OA SQL Injection Vulnerability

Tongda2000 is a web-based intelligent office system from China Tongda Tongda. A SQL injection vulnerability exists in Tongda OA version 2017, which stems from the fact that incorrect manipulation of the TRANSFERID parameter can lead to SQL injection...

TONGDA Office Anywhere SQL Injection Vulnerability

TONGDA Office Anywhere is a collaborative office OA system. TONGDA Office Anywhere 2017 suffers from a SQL injection vulnerability that stems from the fact that incorrect operation of the parameter RECRUITMENTID can lead to SQL injection...

Tongda OA SQL Injection Vulnerability

Tongda2000 is a web-based intelligent office system from China Tongda Tongda. Tongda OA 2017 suffers from a SQL injection vulnerability that stems from the fact that incorrect operation of the parameter EXPERTID can lead to SQL injection...

CVE-2023-5030

A vulnerability has been found in Tongda OA up to 11.10 and classified as critical. This vulnerability affects unknown code of the file general/hr/recruit/plan/delete.php. The manipulation of the argument PLANID leads to sql injection. The exploit has been disclosed to the public and may be used...

CVE-2023-5030

A vulnerability has been found in Tongda OA up to 11.10 and classified as critical. This vulnerability affects unknown code of the file general/hr/recruit/plan/delete.php. The manipulation of the argument PLANID leads to sql injection. The exploit has been disclosed to the public and may be used...

Sql injection

A vulnerability has been found in Tongda OA up to 11.10 and classified as critical. This vulnerability affects unknown code of the file general/hr/recruit/plan/delete.php. The manipulation of the argument PLANID leads to sql injection. The exploit has been disclosed to the public and may be used...

CVE-2023-5030 Tongda OA delete.php sql injection

A vulnerability has been found in Tongda OA up to 11.10 and classified as critical. This vulnerability affects unknown code of the file general/hr/recruit/plan/delete.php. The manipulation of the argument PLANID leads to sql injection. The exploit has been disclosed to the public and may be used...

CVE-2023-5030

CVE-2023-5030 affects Tongda OA up to version 11.10, where the vulnerability resides in the file general/hr/recruit/plan/delete.php. The issue is a SQL injection caused by manipulating the PLAN_ID parameter, with exploitation disclosed publicly. Affected components: Tongda OA, delete.php in the s...

CVE-2023-5030 Tongda OA delete.php sql injection

A vulnerability has been found in Tongda OA up to 11.10 and classified as critical. This vulnerability affects unknown code of the file general/hr/recruit/plan/delete.php. The manipulation of the argument PLANID leads to sql injection. The exploit has been disclosed to the public and may be used...

CVE-2023-5026

A vulnerability classified as problematic has been found in Tongda OA 11.10. Affected is an unknown function of the file /general/ipanel/menucode.php?MENUTYPE=FAV. The manipulation of the argument OASUBWINDOW leads to cross site scripting. It is possible to launch the attack remotely. The exploit...

CVE-2023-5026

A vulnerability classified as problematic has been found in Tongda OA 11.10. Affected is an unknown function of the file /general/ipanel/menucode.php?MENUTYPE=FAV. The manipulation of the argument OASUBWINDOW leads to cross site scripting. It is possible to launch the attack remotely. The exploit...

Cross site scripting

A vulnerability classified as problematic has been found in Tongda OA 11.10. Affected is an unknown function of the file /general/ipanel/menucode.php?MENUTYPE=FAV. The manipulation of the argument OASUBWINDOW leads to cross site scripting. It is possible to launch the attack remotely. The exploit...

CVE-2023-5026

CVE-2023-5026 concerns Tongda OA 11.10, where an XSS vulnerability exists in an unknown function of the file /general/ipanel/menu_code.php?MENU_TYPE=FAV. The argument OA_SUB_WINDOW can be manipulated to trigger cross-site scripting, and the exploit has been disclosed publicly, enabling remote pot...

CVE-2023-5026 Tongda OA cross site scripting

A vulnerability classified as problematic has been found in Tongda OA 11.10. Affected is an unknown function of the file /general/ipanel/menucode.php?MENUTYPE=FAV. The manipulation of the argument OASUBWINDOW leads to cross site scripting. It is possible to launch the attack remotely. The exploit...

CVE-2023-5023

A vulnerability was found in Tongda OA 2017 and classified as critical. Affected by this issue is some unknown functionality of the file general/hr/manage/staffrelatives/delete.php. The manipulation of the argument RELATIVESID leads to sql injection. The exploit has been disclosed to the public a...