CVE-2023-5497

A vulnerability classified as critical has been found in Tongda OA 2017 11.10. Affected is an unknown function of the file general/hr/salary/welfaremanage/delete.php. The manipulation of the argument WELFAREID leads to sql injection. It is possible to launch the attack remotely. The exploit has...

PT-2023-32136

Name of the Vulnerable Software and Affected Versions Tongda OA 2017 version 11.10 Description A critical issue has been found in the software. It affects an unknown function of the file general/hr/salary/welfare manage/delete.php. The manipulation of the WELFARE ID argument leads to sql injectio...

TONGDA Office Anywhere SQL Injection Vulnerability

TONGDA Office Anywhere is a collaborative office OA system. A SQL injection vulnerability exists in Tongda OA 2017 version 11.10, which originates from the parameter WELFAREID in the file general/hr/salary/welfaremanage/delete.php that can lead to SQL injection...