Tongda OA system has a logic flaw vulnerability

Ltd. is subordinate to China National Weapons Industry Information Center CNWIIC, which is referred to as Tongda Xinke. It is a high-tech team with the main business of collaborative management software development and implementation, service and consulting. Tongda OA system has a logical flaw...

Arbitrary User Login Vulnerability in Tongda OA Frontend

Tongda OA Office Anywhere Network Intelligent Office System is a collaborative office automation software independently developed by Beijing Tongda Science and Technology Co., Ltd. and China's enterprise management practices combined with the formation of a comprehensive management office platfor...

Front-end Arbitrary User Fake Login Vulnerability in Tongda OA

Tongda OA Office Anywhere Network Intelligent Office System is a collaborative office automation software developed by Beijing Tongda Science and Technology Co. Ltd. is a collaborative office automation software developed by the company. Tongda OA front-end arbitrary user forgery login...

SQL Injection Vulnerability in Tongda OA of Beijing Tongda Science & Technology Co.

Tongda OA Office Anywhere Network Intelligent Office System is a collaborative office automation software independently developed by Beijing Tongda Science and Technology Co., Ltd. and China's enterprise management practices combined with the formation of a comprehensive management office platfor...

Tongda OA suffers from SQL injection vulnerability (CNVD-2020-27140)

Tongda OA Office Anywhere Network Intelligent Office System is a collaborative office automation software developed by Beijing Tongda Science and Technology Co. Ltd. is a collaborative office automation software developed by the company. There is a SQL injection vulnerability in Tongda OA, which...

SQL Injection Vulnerability in Tongda OA Version 11.4

Tongda OA Office Anywhere Network Intelligent Office System is a collaborative office automation software independently developed by Beijing Tongda Science and Technology Co., Ltd. and China's enterprise management practices combined with the formation of a comprehensive management office platfor...

SQL Injection Vulnerability in Tongda OA Backend

Tongda OA Office Anywhere Network Intelligent Office System is a collaborative office automation software independently developed by Beijing Tongda Science and Technology Co., Ltd. and China's enterprise management practices combined with the formation of a comprehensive management office platfor...

Unauthorized Access Vulnerability in Tongda OA

Tongda OA is a collaborative office automation software. Tongda OA has an unauthorized access vulnerability that can be exploited by attackers to bypass login and directly enter the background...

Command Execution Vulnerability in Tongda OA

Tongda OA is a collaborative office automation software. A command execution vulnerability exists in Tongda OA, which can be exploited by an attacker to execute arbitrary commands...

SQL Injection Vulnerability in the Frontend of Tongda OA System of Beijing Tongda Science and Technology Co.

Ltd. is subordinate to China National Weapons Industry Information Center CNWIIC, which is referred to as Tongda Xinke. It is a high-tech team with the main business of collaborative management software development and implementation, service and consulting. There is a SQL injection vulnerability...

File upload vulnerability in Tongda OA 2015, 2016 Of***.php file

Ltd. is subordinate to China National Weapons Industry Information Center CNWIIC, which is referred to as Tongda Xinke. It is a high-tech team with the main business of collaborative management software development and implementation, service and consulting. A file upload vulnerability exists in...

File Containment Vulnerability in Tongda OA 2017

Ltd. is subordinate to China National Weapons Industry Information Center CNWIIC, which is referred to as Tongda Xinke. It is a high-tech team with the main business of collaborative management software development and implementation, service and consulting. A file inclusion vulnerability exists ...

Tongda OA2017 in SQL Injection Vulnerability

Ltd. is subordinate to China National Weapons Industry Information Center CNWIIC, which is referred to as Tongda Xinke. It is a high-tech team with the main business of collaborative management software development and implementation, service and consulting. A SQL injection vulnerability exists i...

CVE-2019-9759

An issue was discovered in TONGDA Office Anywhere 10.18.190121. There is a SQL Injection vulnerability via the general/approvecenter/list/inputform/workhandle.php runid parameter...

CVE-2019-9759

An issue was discovered in TONGDA Office Anywhere 10.18.190121. There is a SQL Injection vulnerability via the general/approvecenter/list/inputform/workhandle.php runid parameter...

Sql injection

An issue was discovered in TONGDA Office Anywhere 10.18.190121. There is a SQL Injection vulnerability via the general/approvecenter/list/inputform/workhandle.php runid parameter...

CVE-2019-9759

CVE-2019-9759 affects TONGDA Office Anywhere 10.18.190121. The vulnerability is a SQL Injection in the general/approve_center/list/input_form/work_handle.php’s run_id parameter, caused by improper input handling. Potential impact includes full confidentiality, integrity, and availability loss (pe...

CVE-2019-9759

An issue was discovered in TONGDA Office Anywhere 10.18.190121. There is a SQL Injection vulnerability via the general/approvecenter/list/inputform/workhandle.php runid parameter...

PT-2019-19850

Name of the Vulnerable Software and Affected Versions TONGDA Office Anywhere version 10.18.190121 Description A SQL Injection issue was discovered. The vulnerability can be exploited via the run id parameter in the "general/approve center/list/input form/work handle.php" API endpoint...

CVE-2019-9759: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in TONGDA Office Anywhere 10.18.190121. There is a SQL Injection vulnerability via the general/approvecenter/list/inputform/workhandle.php runid parameter...