Submit #223832: SQL injection vulnerability exists in Tongda OA

There is a SQL injection vulnerability in tongda oa versions below v11.10 and v2017. An attacker can use this vulnerability to obtain server permissions.There is a SQL injection vulnerability in tongda oa versions below v11.10 and v2017. An attacker can use this vulnerability to obtain server permissions.There is a SQL injection vulnerability in tongda oa versions below v11.10 and v2017. An attacker can use this vulnerability to obtain server permissions.

• Source: ⚠️ https://github.com/halleyakina/cve/blob/main/sql.md
• User: akina (UID 56906)
• Submission: 10/21/2023 16:03 (3 years ago)
• Moderation: 10/26/2023 07:29 (5 days later)
• Status: Accepted
• VulDB entry: 243589 [Tongda OA 2017 up to 11.9 delete.php id/sort_parent sql injection]
• Points: 20