CVE-2022-25404

Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in delete.php via the DELETESTR parameter...

CVE-2022-25404

CVE-2022-25404 affects Tongda2000 v11.10, with a SQL injection in delete.php via the DELETE_STR parameter caused by insufficient input filtering. The issue is documented across multiple sources (CNVD/CNNVD/NVD Red Hat etc.) confirming an injectable SQL pathway in that specific version and file. N...