Tongda2000

Office Anywhere

27 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2023-7180

Exploit
  • EPSS 0.04%
  • Veröffentlicht 30.12.2023 18:15:40
  • Zuletzt bearbeitet 19.03.2025 15:40:12

A vulnerability has been found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this vulnerability is an unknown functionality of the file general/project/proj/delete.php. The manipulation of the argument PROJ_ID_STR leads to sql ...

9.8

CVE-2023-7023

Exploit
  • EPSS 0.06%
  • Veröffentlicht 21.12.2023 02:15:43
  • Zuletzt bearbeitet 19.03.2025 15:40:12

A vulnerability was found in Tongda OA 2017 up to 11.9. It has been rated as critical. Affected by this issue is some unknown functionality of the file general/vehicle/query/delete.php. The manipulation of the argument VU_ID leads to sql injection. T...

9.8

CVE-2023-7022

Exploit
  • EPSS 0.06%
  • Veröffentlicht 21.12.2023 02:15:43
  • Zuletzt bearbeitet 19.03.2025 15:40:12

A vulnerability was found in Tongda OA 2017 up to 11.9. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file general/work_plan/manage/delete_all.php. The manipulation of the argument DELETE_STR lead...

9.8

CVE-2023-7021

Exploit
  • EPSS 0.06%
  • Veröffentlicht 21.12.2023 01:15:34
  • Zuletzt bearbeitet 01.08.2025 02:08:20

A vulnerability was found in Tongda OA 2017 up to 11.9. It has been classified as critical. Affected is an unknown function of the file general/vehicle/checkup/delete_search.php. The manipulation of the argument VU_ID leads to sql injection. It is po...

9.8

CVE-2023-7020

Exploit
  • EPSS 0.06%
  • Veröffentlicht 21.12.2023 01:15:34
  • Zuletzt bearbeitet 19.03.2025 15:40:12

A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. This issue affects some unknown processing of the file general/wiki/cp/ct/view.php. The manipulation of the argument TEMP_ID leads to sql injection. The attack may be ...

8.8

CVE-2023-5497

Exploit
  • EPSS 0.13%
  • Veröffentlicht 10.10.2023 18:15:19
  • Zuletzt bearbeitet 21.11.2024 08:41:53

A vulnerability classified as critical has been found in Tongda OA 2017 11.10. Affected is an unknown function of the file general/hr/salary/welfare_manage/delete.php. The manipulation of the argument WELFARE_ID leads to sql injection. It is possible...

9.8

CVE-2019-9759

Exploit
  • EPSS 0.31%
  • Veröffentlicht 02.04.2019 14:29:01
  • Zuletzt bearbeitet 21.11.2024 04:52:15

An issue was discovered in TONGDA Office Anywhere 10.18.190121. There is a SQL Injection vulnerability via the general/approve_center/list/input_form/work_handle.php run_id parameter.