CVE-2024-10601 Tongda OA 2017 delete.php sql injection

A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /general/address/private/address/query/delete.php. The manipulation of the argument whererepeat leads to sql injection. The attack can be...

CVE-2024-10601

The CVE-2024-10601 refers to a SQL injection in Tongda OA 2017 up to 11.10, triggered by manipulating the where_repeat argument in /general/address/private/address/query/delete.php. Affects Tongda OA 2017 versions

CVE-2024-10600 Tongda OA 2017 submenu.php sql injection

A vulnerability, which was classified as critical, was found in Tongda OA 2017 up to 11.6. Affected is an unknown function of the file pda/appcenter/submenu.php. The manipulation of the argument appid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-10600 Tongda OA 2017 submenu.php sql injection

A vulnerability, which was classified as critical, was found in Tongda OA 2017 up to 11.6. Affected is an unknown function of the file pda/appcenter/submenu.php. The manipulation of the argument appid leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-10600

CVE-2024-10600 affects Tongda OA 2017 versions up to 11.6. The vulnerability resides in an unknown function within pda/appcenter/submenu.php, where manipulating the appid parameter causes a SQL injection. It allows remote exploitation, and public disclosure of the exploit is noted. Remediation in...

CVE-2024-10599

A vulnerability, which was classified as problematic, has been found in Tongda OA 2017 up to 11.7. This issue affects some unknown processing of the file /inc/packagestaticresources.php. The manipulation leads to resource consumption. The attack may be initiated remotely. The exploit has been...

CVE-2024-10598

A vulnerability classified as critical was found in Tongda OA 11.2/11.3/11.4/11.5/11.6. This vulnerability affects unknown code of the file general/hr/setting/attendance/leave/data.php of the component Annual Leave Handler. The manipulation leads to improper authorization. The attack can be...

CVE-2024-10598

A vulnerability classified as critical was found in Tongda OA 11.2/11.3/11.4/11.5/11.6. This vulnerability affects unknown code of the file general/hr/setting/attendance/leave/data.php of the component Annual Leave Handler. The manipulation leads to improper authorization. The attack can be...

CVE-2024-10599 Tongda OA 2017 package_static_resources.php resource consumption

A vulnerability, which was classified as problematic, has been found in Tongda OA 2017 up to 11.7. This issue affects some unknown processing of the file /inc/packagestaticresources.php. The manipulation leads to resource consumption. The attack may be initiated remotely. The exploit has been...

CVE-2024-10599 Tongda OA 2017 package_static_resources.php resource consumption

A vulnerability, which was classified as problematic, has been found in Tongda OA 2017 up to 11.7. This issue affects some unknown processing of the file /inc/packagestaticresources.php. The manipulation leads to resource consumption. The attack may be initiated remotely. The exploit has been...

CVE-2024-10599

CVE-2024-10599 affects Tongda OA 2017 up to version 11.7. The vulnerability arises from improper handling of the file /inc/package_static_resources.php, leading to resource consumption that can be triggered remotely. Multiple sources confirm the issue and disclose that an exploit exists. Remediat...

CVE-2024-10598 Tongda OA Annual Leave data.php improper authorization

A vulnerability classified as critical was found in Tongda OA 11.2/11.3/11.4/11.5/11.6. This vulnerability affects unknown code of the file general/hr/setting/attendance/leave/data.php of the component Annual Leave Handler. The manipulation leads to improper authorization. The attack can be...

CVE-2024-10598 Tongda OA Annual Leave data.php improper authorization

A vulnerability classified as critical was found in Tongda OA 11.2/11.3/11.4/11.5/11.6. This vulnerability affects unknown code of the file general/hr/setting/attendance/leave/data.php of the component Annual Leave Handler. The manipulation leads to improper authorization. The attack can be...

CVE-2024-10598

Tongda OA versions 11.2–11.6 are affected by a vulnerability in the Annual Leave Handler’s file general/hr/setting/attendance/leave/data.php, caused by improper authorization. The issue allows remote access and exploitation, with public exploits disclosed. Remediation per PT security guidance: up...

PT-2024-16398 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA versions 2017 up to 11.10 Description: A critical issue has been found in Tongda OA, affecting an unknown functionality of the file /general/address/private/address/query/delete.php. The manipulation of the where repeat argument lea...

PT-2024-16414 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA 2017 up to 11.10 Description: A critical issue has been found in Tongda OA, affecting some unknown processing of the file /pda/reportshop/record detail.php. The manipulation of the repid argument leads to SQL injection. The attack m...

PT-2024-16415 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA versions 2017 up to 11.10 Description: A critical issue was found in the file /pda/reportshop/next detail.php, where the manipulation of the repid argument leads to sql injection. It is possible to launch the attack remotely. The...

PT-2024-16396 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA 2017 up to 11.7 Description: A problematic issue has been found in Tongda OA, affecting some unknown processing of the file /inc/package static resources.php. This leads to resource consumption and can be initiated remotely. The iss...

PT-2024-33922

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability has been resolved in the Linux kernel, specifically in the drm/xe/oa component. The issue arises when the xe bb create job function appends a MI BATCH BUFFER END to the...

Command Execution Vulnerability in Zhiyuan OA (CNVD-2024-45618)

Zhiyuan OA is a collaborative management software, a digital collaborative operation platform for medium-sized and large group organizations. A command execution vulnerability exists in Zhiyuan OA, which can be exploited by an attacker to gain server privileges...