SQL injection vulnerability exists in Tongda OA (CNVD-2021-73171)

OA Office Anywhere Network Intelligent Office System is a collaborative office automation software independently developed by Beijing Tongda Xinke Technology Co. There is a SQL injection vulnerability in Tongda OA, attackers can use the vulnerability to obtain sensitive information in the databas...

Office Anywhere 网络智能办公系统某版本前台获取数据库（无需登录）

简要描述： Office Anywhere 网络智能办公系统某版本前台获取数据库（无需登录） 详细说明： Office Anywhere 2011 网络智能办公系统 存在一个通用路径泄漏问题，而泄漏的登录地址可以不需要权限登录到phpmyadmin 且权限为root /mysql/main.php 解密出来可直接登录,这里就不登录进去了 漏洞证明： 附部分案例： http://218.24.163.216:8080/ http://220.171.81.126:1234/ http://221.2.43.9:8000/ http://221.204.213.24/...