Submit #211252: Unauthorized SQL injection vulnerability exists in Tongda OA

There is a SQL injection vulnerability in Tongda oa versions below v11.10 and v2017. An attacker can use this vulnerability to obtain sensitive server information.There is a SQL injection vulnerability in Tongda oa versions below v11.10 and v2017. An attacker can use this vulnerability to obtain sensitive server information.There is a SQL injection vulnerability in Tongda oa versions below v11.10 and v2017. An attacker can use this vulnerability to obtain sensitive server information.

• Source: ⚠️ https://github.com/kpz-wm/cve/blob/main/sql.md
• User: Anonymous User
• Submission: 09/21/2023 10:16 (3 years ago)
• Moderation: 09/29/2023 07:45 (8 days later)
• Status: Accepted
• VulDB entry: 240880 [Tongda OA 2017 prior 11.10 delete.php EXPERT_ID sql injection]
• Points: 20