CVE-2024-25320

Tongda OA v2017–v11.9 is reported to contain a SQL injection vulnerability in the /affair/delete.php endpoint via the $AFF_ID parameter. Affected component: server-side PHP logic handling the parameter. Impact is severe (CVE-2024-25320, CVSS v3.1: 9.8, Confidentiality/Integrity/Availability all H...