CVE-2023-5026

CVE-2023-5026 concerns Tongda OA 11.10, where an XSS vulnerability exists in an unknown function of the file /general/ipanel/menu_code.php?MENU_TYPE=FAV. The argument OA_SUB_WINDOW can be manipulated to trigger cross-site scripting, and the exploit has been disclosed publicly, enabling remote pot...

CVE-2023-2738

A vulnerability classified as critical has been found in Tongda OA 11.10. This affects the function actionGetdata of the file GatewayController.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...

Design/Logic Flaw

A vulnerability classified as critical has been found in Tongda OA 11.10. This affects the function actionGetdata of the file GatewayController.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...

CVE-2023-2738 Tongda OA GatewayController.php actionGetdata unrestricted upload

A vulnerability classified as critical has been found in Tongda OA 11.10. This affects the function actionGetdata of the file GatewayController.php. The manipulation leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may ...