提交 #433495: Beijing Tongda Xinke Technology Co., Ltd Tongda OA v11.2-v11.6 unauthorized access
| 标题 | Beijing Tongda Xinke Technology Co., Ltd Tongda OA v11.2-v11.6 unauthorized access |
|---|---|
| 描述 | general/hr/setting/attendance/leave/data.php No login verification was performed Unauthorized modification of annual leave rest time is allowed It is also possible to view the names of all system users without authorization |
| 来源 | ⚠️ https:/ |
| 用户 | LVZC (UID 74910) |
| 提交 | 2024-10-29 09時16分 (2 年前) |
| 管理 | 2024-10-31 16時25分 (2 days later) |
| 状态 | 已接受 |
| VulDB条目 | 282610 [Tongda OA 直到 11.6 Annual Leave data.php 权限提升] |
| 积分 | 16 |