Command Execution Vulnerability in TongWeb Management Console (CNVD-2022-16268)

TongWeb is an application server from Beijing Orientop Technology Co. A command execution vulnerability exists in the TongWeb management console that can be exploited by an attacker to gain server control privileges...

Stored XSS Vulnerability in TongWeb Management Console at Beijing Orientop Technology Co.

TongWeb is an application server from Beijing Orientop Technology Co. A stored XSS vulnerability exists in the TongWeb management console of Beijing Oriental Tong Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information such as user cookies...