CVE-2023-5497

A vulnerability classified as critical has been found in Tongda OA 2017 11.10. Affected is an unknown function of the file general/hr/salary/welfaremanage/delete.php. The manipulation of the argument WELFAREID leads to sql injection. It is possible to launch the attack remotely. The exploit has...

TONGDA Office Anywhere SQL Injection Vulnerability

TONGDA Office Anywhere is a collaborative office OA system. A SQL injection vulnerability exists in Tongda OA 2017 version 11.10, which originates from the parameter WELFAREID in the file general/hr/salary/welfaremanage/delete.php that can lead to SQL injection...

PT-2023-32136

Name of the Vulnerable Software and Affected Versions Tongda OA 2017 version 11.10 Description A critical issue has been found in the software. It affects an unknown function of the file general/hr/salary/welfare manage/delete.php. The manipulation of the WELFARE ID argument leads to sql injectio...