Command Execution Vulnerability in Tongda OA

Tongda OA is a collaborative office automation software. A command execution vulnerability exists in Tongda OA, which can be exploited by an attacker to execute arbitrary commands...

SQL Injection Vulnerability in the Frontend of Tongda OA System of Beijing Tongda Science and Technology Co.

Ltd. is subordinate to China National Weapons Industry Information Center CNWIIC, which is referred to as Tongda Xinke. It is a high-tech team with the main business of collaborative management software development and implementation, service and consulting. There is a SQL injection vulnerability...

File upload vulnerability in Tongda OA 2015, 2016 Of***.php file

Ltd. is subordinate to China National Weapons Industry Information Center CNWIIC, which is referred to as Tongda Xinke. It is a high-tech team with the main business of collaborative management software development and implementation, service and consulting. A file upload vulnerability exists in...

File Containment Vulnerability in Tongda OA 2017

Ltd. is subordinate to China National Weapons Industry Information Center CNWIIC, which is referred to as Tongda Xinke. It is a high-tech team with the main business of collaborative management software development and implementation, service and consulting. A file inclusion vulnerability exists ...

Tongda OA2017 in SQL Injection Vulnerability

Ltd. is subordinate to China National Weapons Industry Information Center CNWIIC, which is referred to as Tongda Xinke. It is a high-tech team with the main business of collaborative management software development and implementation, service and consulting. A SQL injection vulnerability exists i...

CVE-2019-9759

An issue was discovered in TONGDA Office Anywhere 10.18.190121. There is a SQL Injection vulnerability via the general/approvecenter/list/inputform/workhandle.php runid parameter...

CVE-2019-9759

An issue was discovered in TONGDA Office Anywhere 10.18.190121. There is a SQL Injection vulnerability via the general/approvecenter/list/inputform/workhandle.php runid parameter...

Sql injection

An issue was discovered in TONGDA Office Anywhere 10.18.190121. There is a SQL Injection vulnerability via the general/approvecenter/list/inputform/workhandle.php runid parameter...

CVE-2019-9759

CVE-2019-9759 affects TONGDA Office Anywhere 10.18.190121. The vulnerability is a SQL Injection in the general/approve_center/list/input_form/work_handle.php’s run_id parameter, caused by improper input handling. Potential impact includes full confidentiality, integrity, and availability loss (pe...

CVE-2019-9759

An issue was discovered in TONGDA Office Anywhere 10.18.190121. There is a SQL Injection vulnerability via the general/approvecenter/list/inputform/workhandle.php runid parameter...

File Containment Vulnerability in Tongda OA System

Tongda OA 2017 version is an office software system. A file inclusion vulnerability exists in the Tonto OA system. An attacker can exploit the vulnerability to include malicious files and gain control of the web server...

Arbitrary file deletion vulnerability in Tongda OA system (CNVD-2019-12764)

Tongda OA 2017 version is an office software system. Tongda OA system has an arbitrary file deletion vulnerability, which can be exploited by attackers to delete arbitrary files...

Arbitrary file deletion vulnerability in Tongda OA system (CNVD-2019-12765)

Tongda OA 2017 version is an office software system. Tongda OA system has an arbitrary file deletion vulnerability, which can be exploited by attackers to delete arbitrary files...

Vulnerability in over-authorized access of Tongda OA of Beijing Tongda Science & Technology Co.

Ltd. is subordinate to China National Weapons Industry Information Center CNWIIC, which is referred to as Tongda Xinke. It is a high-tech team with the main business of collaborative management software development and implementation, service and consulting. Tongda OA has an override access...

Arbitrary File Download Vulnerability in Tongda OA of Beijing Tongda Science and Technology Co.

Ltd. is subordinate to China National Weapons Industry Information Center CNWIIC, which is referred to as Tongda Xinke. It is a high-tech team with the main business of collaborative management software development and implementation, service and consulting. There is an arbitrary file download...

SQL injection vulnerability in products.php page cid parameter of Shenzhou Tongda website builder system

ShenZhouTongDa network building system is a website building system. A SQL injection vulnerability exists in the cid parameter on the products.php page of the website builder system. An attacker can exploit this vulnerability to obtain sensitive database information...

Stored Cross-site Scripting Vulnerability in the Latest Version of Tongda OA Office System

Tongda OA office system 2015 office anywhere 2015 is a domestic office software. A stored cross-site scripting vulnerability exists in the editor of Offer Anywhere 2015, a Tongda OA network intelligent office system. A remote attacker can exploit this vulnerability to inject arbitrary Web script ...

File Containment Vulnerability in OA International Edition of Beijing Tongda Xinko Technology Co.

OA is a new type of office that combines modern office and computer technology. Ltd. OA international version of the existence of file containment vulnerability, an attacker can access unauthorized files, resulting in sensitive file leakage harm...

SQL Injection Vulnerability in SERVER Variables of Tongda OA Education Edition

Tongda OA Education Edition is a set of digital campus software for the education industry developed on the basis of Tongda OA2013 Enhanced Edition, whose distinctive feature is that it integrates school website, collaborative office, instant messaging, cyberspace and mobile office. There is a SQ...

SQL Injection Vulnerability in Tongda OA System

Ltd. OA-Office Anywhere system is a network intelligent office system developed using PHP. There is a SQL injection vulnerability in this product, the vulnerability URL is: http://host/interface/auth.php?&PASSWORD=1&USERID= The vulnerability URL is: The injected parameter is: USERID The attacker...