48 matches found
CVE-2023-5781 Tongda OA 2017 delete_webmail.php DELETE_STR sql injection
A vulnerability, which was classified as critical, has been found in Tongda OA 2017 11.10. This issue affects the function DELETESTR of the file general/system/resmanage/monitor/deletewebmail.php. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2023-5781: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in Tongda OA 2017 11.10. This issue affects the function DELETESTR of the file general/system/resmanage/monitor/deletewebmail.php. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2023-5780: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in Tongda OA 2017 11.10. This vulnerability affects unknown code of the file general/system/approvecenter/flowguide/flowtype/setprint/delete.php. The manipulation of the argument DELETESTR leads to sql injection. The attack can be initiated remotel...
CVE-2023-4166
A vulnerability has been found in Tongda OA and classified as critical. This vulnerability affects unknown code of the file general/system/sealmanage/dianju/deletelog.php. The manipulation of the argument DELETESTR leads to sql injection. The exploit has been disclosed to the public and may be...
Sql injection
A vulnerability has been found in Tongda OA and classified as critical. This vulnerability affects unknown code of the file general/system/sealmanage/dianju/deletelog.php. The manipulation of the argument DELETESTR leads to sql injection. The exploit has been disclosed to the public and may be...
CVE-2023-4165
A vulnerability, which was classified as critical, was found in Tongda OA. This affects an unknown part of the file general/system/sealmanage/iweboffice/deleteseal.php. The manipulation of the argument DELETESTR leads to sql injection. The exploit has been disclosed to the public and may be used...
Sql injection
A vulnerability, which was classified as critical, was found in Tongda OA. This affects an unknown part of the file general/system/sealmanage/iweboffice/deleteseal.php. The manipulation of the argument DELETESTR leads to sql injection. The exploit has been disclosed to the public and may be used...
CVE-2023-4165
CVE-2023-4165 affects Tongda OA, specifically the file general/system/seal_manage/iweboffice/delete_seal.php. The vulnerability arises from manipulating the argument DELETE_STR , leading to a SQL injection . Public disclosures exist and the impact is described as enabling attacker access via netw...
CVE-2023-4165: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in Tongda OA. This affects an unknown part of the file general/system/sealmanage/iweboffice/deleteseal.php. The manipulation of the argument DELETESTR leads to sql injection. The exploit has been disclosed to the public and may be used...
CVE-2023-4166: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in Tongda OA and classified as critical. This vulnerability affects unknown code of the file general/system/sealmanage/dianju/deletelog.php. The manipulation of the argument DELETESTR leads to sql injection. The exploit has been disclosed to the public and may be...
Tongda2000 SQL Injection Vulnerability (CNVD-2022-71113)
Tongda2000 is a web-based intelligent office system from Tongda, China. a SQL injection vulnerability exists in Tongda2000 v11.10, which stems from the product's failure to effectively filter the special characters in the DELETESTR parameter data in the deletequery.php file. An attacker could...
Tongda2000 SQL Injection Vulnerability (CNVD-2022-71114)
Tongda2000 is a web-based intelligent office system from Tongda, China. a SQL injection vulnerability exists in Tongda2000 v11.10, which stems from the product's failure to effectively filter the special characters in the DELETESTR parameter of the delete.php file. An attacker could use this...
Tongda2000 SQL Injection Vulnerability (CNVD-2022-71115)
Tongda2000 is a web-based intelligent office system from Tongda, China. a SQL injection vulnerability exists in Tongda2000 v11.10, which stems from the product's failure to effectively filter the special characters in the DELETESTR parameter data in the changebox.php file. An attacker could use...
CVE-2022-25406
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in deletequery.php via the DELETESTR parameter...
CVE-2022-25405
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in changebox.php via the DELETESTR parameter...
CVE-2022-25406
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in deletequery.php via the DELETESTR parameter...
CVE-2022-25404
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in delete.php via the DELETESTR parameter...
Sql injection
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in delete.php via the DELETESTR parameter...