Lucene search
K

5 matches found

Cvelist
Cvelist
added 2024/11/03 10:0 a.m.18 views

CVE-2024-10731 Tongda OA check_seal.php sql injection

A vulnerability, which was classified as critical, was found in Tongda OA up to 11.10. Affected is an unknown function of the file /pda/appcenter/checkseal.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed...

6.5CVSS0.00244EPSS
Exploits1References4
CNNVD
CNNVD
added 2024/11/03 12:0 a.m.2 views

TONGDA Office Anywhere SQL注入漏洞

TONGDA Office Anywhere is a collaborative office OA system from China Tongda TONGDA. TONGDA Office Anywhere suffers from a SQL injection vulnerability, which originates from the ID parameter of the /pda/appcenter/checkseal.php page containing a SQL injection vulnerability...

9.8CVSS7AI score0.00244EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2024/11/01 3:0 p.m.11 views

CVE-2024-10658 Tongda OA check_seal.php sql injection

A vulnerability classified as critical was found in Tongda OA up to 11.10. Affected by this vulnerability is an unknown functionality of the file /pda/approvecenter/checkseal.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been...

6.5CVSS7.4AI score0.00155EPSS
Exploits1References4
CVE
CVE
added 2024/11/01 3:31 a.m.45 views

CVE-2024-10617

CVE-2024-10617 concerns Tongda OA (up to version 11.10). The vulnerability is a SQL injection in the file /pda/workflow/check_seal.php caused by unsafely handling the ID parameter, enabling remote exploitation. Multiple sources confirm impact is significant (auth not required, network access) wit...

9.8CVSS7.1AI score0.00097EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2024/11/01 3:31 a.m.15 views

CVE-2024-10617 Tongda OA check_seal.php sql injection

A vulnerability classified as critical was found in Tongda OA up to 11.10. This vulnerability affects unknown code of the file /pda/workflow/checkseal.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the publi...

6.5CVSS0.00097EPSS
Exploits1References4
Rows per page
Query Builder