Lucene search
K

59 matches found

CNNVD
CNNVD
added 2023/12/16 12:0 a.m.3 views

Tongda2000 SQL Injection Vulnerability

Tongda2000 is a network intelligent office system of China Tongda Tongda. Tongda2000 11.10 and earlier versions exist SQL injection vulnerability, the vulnerability stems from the file general/vote/manage/delete.php SQL injection vulnerability...

9.8CVSS7.8AI score0.0066EPSS
Exploits1References4
OSV
OSV
added 2023/12/08 3:15 p.m.3 views

CVE-2023-6611

A vulnerability was found in Tongda OA 2017 up to 11.9. It has been declared as critical. This vulnerability affects unknown code of the file pda/pad/email/delete.php. The manipulation of the argument EMAILID leads to sql injection. The exploit has been disclosed to the public and may be used...

7.5CVSS5.5AI score0.00643EPSS
Exploits1References3
OSV
OSV
added 2023/12/08 3:15 p.m.5 views

CVE-2023-6608

A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this issue is some unknown functionality of the file general/notify/manage/delete.php. The manipulation of the argument DELETESTR leads to sql injection. The exploit has been disclosed to the public and...

7.5CVSS5.5AI score0.00643EPSS
Exploits1References3
OSV
OSV
added 2023/12/08 2:15 p.m.4 views

CVE-2023-6607

A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical. Affected by this vulnerability is an unknown functionality of the file general/wiki/cp/manage/delete.php. The manipulation of the argument TERMIDSTR leads to sql injection. The exploit has been disclosed to t...

7.5CVSS5.6AI score0.00716EPSS
Exploits1References3
CNNVD
CNNVD
added 2023/12/08 12:0 a.m.4 views

TONGDA Office Anywhere SQL Injection Vulnerability

TONGDA Office Anywhere is a collaborative office OA system. A SQL injection vulnerability exists in TONGDA Office Anywhere 2017 versions prior to 11.10, which originates from the presence of an unknown function in general/notify/manage/delete.php, which leads to a SQL injection via the parameter...

7.5CVSS6.2AI score0.00643EPSS
Exploits1References4
OSV
OSV
added 2023/11/24 4:15 p.m.3 views

CVE-2023-6276

A vulnerability classified as critical has been found in Tongda OA 2017 up to 11.9. This affects an unknown part of the file general/wiki/cp/ct/delete.php. The manipulation of the argument PROJIDSTR leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

7.5CVSS5.6AI score0.00632EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/11/24 12:0 a.m.3 views

PT-2023-32589 · Tongda · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA 2017 versions up to 11.9 Description: A critical issue has been found in the file general/wiki/cp/ct/delete.php, where the manipulation of the PROJ ID STR argument leads to sql injection. This issue can be initiated remotely. The...

7.5CVSS6.9AI score0.00632EPSS
Exploits1References7
BDU FSTEC
BDU FSTEC
added 2023/11/17 12:0 a.m.4 views

The vulnerability of the General/vehicle/checkup/delete.php component of the Tongda OA automation tool allows a hacker to execute arbitrary SQL code.

The vulnerability of the General/vehicle/checkup/delete.php component of the Tongda OA automation tool for business processes is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

6.3CVSS7.2AI score0.00873EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2023/11/12 11:15 a.m.2 views

CVE-2023-6084

A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this issue is some unknown functionality of the file general/vehicle/checkup/delete.php. The manipulation of the argument VUID leads to sql injection. The exploit has been disclosed to the public and ma...

9.8CVSS5.5AI score
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/11/12 12:0 a.m.5 views

PT-2023-6916 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA versions up to 11.9 Description: A critical issue was found in Tongda OA, affecting some unknown functionality of the file general/vehicle/checkup/delete.php. The manipulation of the VU ID argument leads to SQL injection...

9.8CVSS7.2AI score0.00873EPSS
Exploits1References6
GithubExploit
GithubExploit
added 2023/11/11 10:54 a.m.21 views

Exploit for SQL Injection in Code-Projects Blood_Bank

CVE-2023-46022-Code-Projects-Blood-Bank-1.0-OOB-SQL-Injection-...

7.8CVSS8.4AI score0.00795EPSS
Exploits4
OSV
OSV
added 2023/10/26 1:15 p.m.4 views

CVE-2023-5780

A vulnerability classified as critical was found in Tongda OA 2017 11.10. This vulnerability affects unknown code of the file general/system/approvecenter/flowguide/flowtype/setprint/delete.php. The manipulation of the argument DELETESTR leads to sql injection. The attack can be initiated remotel...

9.8CVSS5.7AI score0.00723EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/10/26 12:0 a.m.5 views

PT-2023-32319 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA version 2017 11.10 Description: A critical vulnerability was found in Tongda OA, affecting the file general/system/approve center/flow guide/flow type/set print/delete.php. The manipulation of the DELETE STR argument leads to SQL...

9.8CVSS7.9AI score0.00723EPSS
Exploits1References7
GithubExploit
GithubExploit
added 2023/10/13 6:19 p.m.17 views

Exploit for SQL Injection in Projectworlds Asset_Management_System_Project_In_Php

CVE-2023-43144 Description Assets Management System 1.0 is...

9.8CVSS10AI score0.00911EPSS
Exploits2
CNNVD
CNNVD
added 2023/10/10 12:0 a.m.3 views

TONGDA Office Anywhere SQL Injection Vulnerability

TONGDA Office Anywhere is a collaborative office OA system. A SQL injection vulnerability exists in Tongda OA 2017 version 11.10, which originates from the parameter WELFAREID in the file general/hr/salary/welfaremanage/delete.php that can lead to SQL injection...

8.8CVSS7.9AI score0.00668EPSS
Exploits1References5
OSV
OSV
added 2023/09/30 6:15 a.m.2 views

CVE-2023-5298

A vulnerability was found in Tongda OA 2017. It has been rated as critical. Affected by this issue is some unknown functionality of the file general/hr/recruit/requirements/delete.php. The manipulation of the argument REQUIREMENTSID leads to sql injection. The exploit has been disclosed to the...

7.5CVSS5.6AI score0.00581EPSS
Exploits1References3
OSV
OSV
added 2023/09/29 3:15 p.m.4 views

CVE-2023-5265

A vulnerability, which was classified as critical, has been found in Tongda OA 2017. Affected by this issue is some unknown functionality of the file general/hr/manage/stafftransfer/delete.php. The manipulation of the argument TRANSFERID leads to sql injection. The exploit has been disclosed to t...

9.8CVSS5.5AI score0.00785EPSS
Exploits1References3
CNNVD
CNNVD
added 2023/09/10 12:0 a.m.5 views

SourceCodester Contact Manager App SQL Injection Vulnerability

Contact Manager App is a contact manager application by the individual developer Remy Andrade. SourceCodester Contact Manager App suffers from a SQL injection vulnerability that originates from an SQL injection attack via delete.php...

9.8CVSS8AI score0.00721EPSS
Exploits1References4
OSV
OSV
added 2021/05/06 1:15 p.m.3 views

CVE-2020-19112

SQL Injection vulnerability in Online Book Store v1.0 via the bookisbn parameter to admindelete.php, which could let a remote malicious user execute arbitrary code...

9.8CVSS7.6AI score0.01944EPSS
Exploits1References1
Rows per page
Query Builder