Submit #433532: Beijing Tongda Xinke Technology Co., Ltd Tongda OA v2017-v11.10 SQL injection
| Title | Beijing Tongda Xinke Technology Co., Ltd Tongda OA v2017-v11.10 SQL injection |
|---|---|
| Description | module/word_model/view/index.php The $query_str and $DOT_TPL-STR parameters were not processed properly, resulting in SQL injection |
| Source | ⚠️ https:/ |
| User | LVZC2 (UID 76821) |
| Submission | 10/29/2024 09:55 (2 years ago) |
| Moderation | 11/02/2024 17:27 (4 days later) |
| Status | Accepted |
| VulDB entry | 282901 [Tongda OA 2017 up to 11.10 index.php query_str sql injection] |
| Points | 16 |