Vulnerabilities

Filters

1 selected

60 records

Sort

Vendor: Tongda Clear all filters

TI-2024-09946 CVE-2024-10732 · GHSA-28gh-p4vv-27p2

Tongda OA 2017 index.php sql injection

MEDIUM 57

A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00517 Published 2024-11-03 No fix listed CWE-89

TI-2024-09945 CVE-2024-10731 · GHSA-5rxh-xq99-fg3p

Tongda OA check_seal.php sql injection

MEDIUM 57

A vulnerability, which was classified as critical, was found in Tongda OA up to 11.10.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00549 Published 2024-11-03 No fix listed CWE-89

TI-2024-09944 CVE-2024-10730 · GHSA-p4rw-3p9x-xjfq

Tongda OA web_show.php sql injection

MEDIUM 57

A vulnerability, which was classified as critical, has been found in Tongda OA up to 11.6.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00517 Published 2024-11-03 No fix listed CWE-89

TI-2024-09876 CVE-2024-10658 · GHSA-cg3v-gfwm-qm3c

Tongda OA check_seal.php sql injection

LOW 25

A vulnerability classified as critical was found in Tongda OA up to 11.10.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00722 Published 2024-11-01 No fix listed CWE-89

TI-2024-09875 CVE-2024-10657 · GHSA-c788-vr8w-m23f

Tongda OA prcs_info.php sql injection

LOW 25

A vulnerability classified as critical has been found in Tongda OA up to 11.10.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00722 Published 2024-11-01 No fix listed CWE-89

TI-2024-09874 CVE-2024-10656 · GHSA-wp7f-4gq5-98j3

Tongda OA 2017 apply.php sql injection

MEDIUM 57

A vulnerability was found in Tongda OA 2017 up to 11.9.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00722 Published 2024-11-01 No fix listed CWE-89

TI-2024-09873 CVE-2024-10655 · GHSA-3443-cx6f-v8p4

Tongda OA 2017 new.php sql injection

MEDIUM 57

A vulnerability was found in Tongda OA 2017 up to 11.9.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00572 Published 2024-11-01 No fix listed CWE-89

TI-2024-09841 CVE-2024-10619 · GHSA-jpr6-xhvm-4v65

Tongda OA 2017 next_detail.php sql injection

MEDIUM 57

A vulnerability, which was classified as critical, was found in Tongda OA 2017 up to 11.10.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00572 Published 2024-11-01 No fix listed CWE-89

TI-2024-09840 CVE-2024-10618 · GHSA-p8cx-v8p3-hgg5

Tongda OA 2017 record_detail.php sql injection

MEDIUM 57

A vulnerability, which was classified as critical, has been found in Tongda OA 2017 up to 11.10.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00572 Published 2024-11-01 No fix listed CWE-89

TI-2024-09839 CVE-2024-10617 · GHSA-r7gh-rv85-hjrr

Tongda OA check_seal.php sql injection

MEDIUM 57

A vulnerability classified as critical was found in Tongda OA up to 11.10.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00572 Published 2024-11-01 No fix listed CWE-89

TI-2024-09838 CVE-2024-10616 · GHSA-mp93-mq93-5625

Tongda OA webSignSubmit.php sql injection

MEDIUM 57

A vulnerability classified as critical has been found in Tongda OA up to 11.9.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00572 Published 2024-11-01 No fix listed CWE-89

TI-2024-09837 CVE-2024-10615 · GHSA-gvgx-373w-cg37

Tongda OA 2017 delete_data_attach.php sql injection

MEDIUM 57

A vulnerability was found in Tongda OA 2017 up to 11.10.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00572 Published 2024-11-01 No fix listed CWE-89

TI-2024-09824 CVE-2024-10602 · GHSA-5q64-wc64-vx7h

Tongda OA 2017 data_picker_link.php sql injection

MEDIUM 57

A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00572 Published 2024-10-31 No fix listed CWE-89

TI-2024-09823 CVE-2024-10601 · GHSA-cj4m-g8cq-fx97

Tongda OA 2017 delete.php sql injection

MEDIUM 57

A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00572 Published 2024-10-31 No fix listed CWE-89

TI-2024-09822 CVE-2024-10600 · GHSA-hpqh-8886-g8fh

Tongda OA 2017 submenu.php sql injection

HIGH 70

A vulnerability, which was classified as critical, was found in Tongda OA 2017 up to 11.6.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.06607 Published 2024-10-31 No fix listed CWE-89

TI-2024-09821 CVE-2024-10599 · GHSA-8x99-24cg-9h7m

Tongda OA 2017 package_static_resources.php resource consumption

HIGH 70

A vulnerability, which was classified as problematic, has been found in Tongda OA 2017 up to 11.7.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.01005 Published 2024-10-31 No fix listed CWE-400

TI-2024-09820 CVE-2024-10598 · GHSA-x5m5-p6c8-m3mx

Tongda OA Annual Leave data.php improper authorization

HIGH 70

A vulnerability classified as critical was found in Tongda OA 11.2/11.3/11.4/11.5/11.6.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00531 Published 2024-10-31 No fix listed CWE-285

TI-2024-04559 CVE-2024-4903 · GHSA-946r-mx2c-f2pf

Tongda OA delete.php sql injection

MEDIUM 57

A vulnerability was found in Tongda OA 2017.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.004 Published 2024-05-15 No fix listed CWE-89

TI-2024-16695 CVE-2024-25320 · GHSA-95h5-gp28-rjvc

Tongda OA v2017 and up to v11.9 was discovered to contain a SQL injection vulnerability…

HIGH 82

Tongda OA v2017 and up to v11.9 was discovered to contain a SQL injection vulnerability via the $AFF_ID parameter at /affair/delete.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00734 Published 2024-02-16 No fix listed CWE-89

TI-2024-01166 CVE-2024-1252 · GHSA-44xm-468v-w3hq

Tongda OA 2017 delete.php sql injection

MEDIUM 44

A vulnerability classified as critical was found in Tongda OA 2017 up to 11.9.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00651 Published 2024-02-06 No fix listed CWE-89

TI-2024-01165 CVE-2024-1251 · GHSA-cpxr-hfmm-j69h

Tongda OA 2017 delete.php sql injection

HIGH 75

A vulnerability classified as critical has been found in Tongda OA 2017 up to 11.10.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00617 Published 2024-02-06 No fix listed CWE-89

TI-2024-00865 CVE-2024-0938 · GHSA-w84c-xcg5-6p7x

Tongda OA 2017 delete_webmail.php sql injection

HIGH 82

A vulnerability, which was classified as critical, was found in Tongda OA 2017 up to 11.9.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0066 Published 2024-01-26 No fix listed CWE-89

TI-2023-06567 CVE-2023-7180 · GHSA-c4cq-2j9h-h83c

Tongda OA 2017 delete.php sql injection

MEDIUM 58

A vulnerability has been found in Tongda OA 2017 up to 11.9 and classified as critical.

CVSS 3.1MEDIUM 5.5 Adjacent network Low privileges No interaction EPSS 0.0051 Published 2023-12-30 No fix listed CWE-89

TI-2023-06420 CVE-2023-7023 · GHSA-3f7v-mv8f-pm5f

Tongda OA 2017 delete.php sql injection

HIGH 75

A vulnerability was found in Tongda OA 2017 up to 11.9.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00695 Published 2023-12-21 No fix listed CWE-89

TI-2023-06419 CVE-2023-7022 · GHSA-hhxg-32x3-m6p5

Tongda OA 2017 delete_all.php sql injection

HIGH 76

A vulnerability was found in Tongda OA 2017 up to 11.9.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00695 Published 2023-12-21 No fix listed CWE-89