CVE-2019-9759: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in TONGDA Office Anywhere 10.18.190121. There is a SQL Injection vulnerability via the general/approvecenter/list/inputform/workhandle.php runid parameter...