CVE-2023-6608

CVE-2023-6608 affects Tongda OA 2017 up to 11.9. The vulnerability is a SQL injection in the file general/notify/manage/delete.php caused by manipulation of the DELETE_STR argument. The issue has been publicly disclosed and may be exploited. Upgrading to version 11.10 addresses the vulnerability....

CVE-2023-6608 Tongda OA 2017 delete.php sql injection

A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this issue is some unknown functionality of the file general/notify/manage/delete.php. The manipulation of the argument DELETESTR leads to sql injection. The exploit has been disclosed to the public and...

CVE-2023-6607

A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical. Affected by this vulnerability is an unknown functionality of the file general/wiki/cp/manage/delete.php. The manipulation of the argument TERMIDSTR leads to sql injection. The exploit has been disclosed to t...

Sql injection

A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical. Affected by this vulnerability is an unknown functionality of the file general/wiki/cp/manage/delete.php. The manipulation of the argument TERMIDSTR leads to sql injection. The exploit has been disclosed to t...

CVE-2023-6607 Tongda OA 2017 delete.php sql injection

A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical. Affected by this vulnerability is an unknown functionality of the file general/wiki/cp/manage/delete.php. The manipulation of the argument TERMIDSTR leads to sql injection. The exploit has been disclosed to t...

CVE-2023-6607

CVE-2023-6607 affects Tongda OA 2017 up to 11.10. The vulnerability is a SQL injection in general/wiki/cp/manage/delete.php where manipulating TERM_ID_STR enables injection. The exploit has been disclosed publicly and vendor response is not documented in the provided sources. No remediation detai...

Tongda OA SQL Injection Vulnerability

Tongda2000 is a web-based intelligent office system from China Tongda Tongda. Tongda OA 2017 11.10 and earlier versions suffer from a SQL injection vulnerability that originates from the presence of an unknown function in general/wiki/cp/manage/delete.php, which leads to SQL injection via the...

PT-2023-32712 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA 2017 versions up to 11.9 Description: A critical issue was found in some unknown functionality of the file general/notify/manage/delete.php. The manipulation of the DELETE STR argument leads to sql injection. The issue has been...

CVE-2023-6276

A vulnerability classified as critical has been found in Tongda OA 2017 up to 11.9. This affects an unknown part of the file general/wiki/cp/ct/delete.php. The manipulation of the argument PROJIDSTR leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

Sql injection

A vulnerability classified as critical has been found in Tongda OA 2017 up to 11.9. This affects an unknown part of the file general/wiki/cp/ct/delete.php. The manipulation of the argument PROJIDSTR leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2023-6276 Tongda OA 2017 delete.php sql injection

A vulnerability classified as critical has been found in Tongda OA 2017 up to 11.9. This affects an unknown part of the file general/wiki/cp/ct/delete.php. The manipulation of the argument PROJIDSTR leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2023-6276 Tongda OA 2017 delete.php sql injection

A vulnerability classified as critical has been found in Tongda OA 2017 up to 11.9. This affects an unknown part of the file general/wiki/cp/ct/delete.php. The manipulation of the argument PROJIDSTR leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2023-6276

Tongda OA 2017 up to 11.9 contains a SQL injection in delete.php due to manipulation of the PROJ_ID_STR parameter. The vulnerability can be triggered remotely and has been publicly disclosed. Upgrading to version 11.10 addresses this issue. Affected component is general/wiki/cp/ct/delete.php; the...

PT-2023-32589 · Tongda · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA 2017 versions up to 11.9 Description: A critical issue has been found in the file general/wiki/cp/ct/delete.php, where the manipulation of the PROJ ID STR argument leads to sql injection. This issue can be initiated remotely. The...

Information Leakage Vulnerability in BlueLine OA of Shenzhen BlueLine Software Co.

Shenzhen BlueLine Software Co., Ltd. is a company that provides integrated solutions for all kinds of organizations, such as smart office, mobile portal, knowledge management, contract management, digital operation and financial sharing. An information leakage vulnerability exists in BlueLine OA ...

kernel: drm/i915: fix race condition UAF in i915_perf_add_config_ioctl

A use-after-free vulnerability was found in the Intel i915 GPU driver's performance monitoring subsystem. A race condition between adding and removing OA configurations allows dereferencing a freed object...

CVE-2023-6084

A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this issue is some unknown functionality of the file general/vehicle/checkup/delete.php. The manipulation of the argument VUID leads to sql injection. The exploit has been disclosed to the public and ma...

Sql injection

A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this issue is some unknown functionality of the file general/vehicle/checkup/delete.php. The manipulation of the argument VUID leads to sql injection. The exploit has been disclosed to the public and ma...

CVE-2023-6084

CVE-2023-6084 affects Tongda OA 2017 up to 11.9. Affected code path: general/vehicle/checkup/delete.php (reports indicate manipulation of the VU_ID argument leads to SQL injection). Documents consistently describe public disclosure of the exploit and recommend upgrading to version 11.10 to addres...

CVE-2023-6084 Tongda OA 2017 delete.php sql injection

A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this issue is some unknown functionality of the file general/vehicle/checkup/delete.php. The manipulation of the argument VUID leads to sql injection. The exploit has been disclosed to the public and ma...