Lucene search
K

4 matches found

OSV
OSV
added 2023/05/16 3:15 p.m.1 views

CVE-2023-2738

A vulnerability classified as critical has been found in Tongda OA 11.10. This affects the function actionGetdata of the file GatewayController.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...

9.8CVSS6.2AI score
Exploits0References3
Cvelist
Cvelist
added 2023/05/16 3:0 p.m.18 views

CVE-2023-2738 Tongda OA GatewayController.php actionGetdata unrestricted upload

A vulnerability classified as critical has been found in Tongda OA 11.10. This affects the function actionGetdata of the file GatewayController.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...

6.5CVSS9.7AI score0.00462EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/05/16 12:0 a.m.4 views

PT-2023-21085 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA version 11.10 Description: A critical vulnerability has been found in Tongda OA, affecting the actionGetdata function of the GatewayController.php file. This vulnerability leads to unrestricted upload and can be initiated remotely...

9.8CVSS6.9AI score0.00462EPSS
Exploits1References6
CNNVD
CNNVD
added 2023/05/16 12:0 a.m.5 views

TONGDA Office Anywhere 代码问题漏洞

TONGDA Office Anywhere is a collaborative office OA system. A code issue vulnerability exists in TONGDA Office Anywhere version 11.10, which stems from a problem with the function actionGetdata in the file GatewayController.php, which can lead to unrestricted uploads...

9.8CVSS7AI score0.00462EPSS
Exploits1References4
Rows per page
Query Builder