GCVE - cpe:2.3:a:tongda2000:office_anywhere:2017:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:tongda2000:office_anywhere:2017:*:*:*:*:*:*:*

part: a version: 2017 update: *

Vendor	Tongda2000 (`402366c0-edf5-5533-ba75-dfdacc492d6c`)
Product	Office Anywhere (`8b2bf925-7797-5265-999f-138ed73a8e16`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-25320`	vulnerable	2026-06-08 06:31:22.792759	Details available Tongda OA v2017 and up to v11.9 was discovered to contain a SQL injection vulnerability via the $AFF_ID parameter at /affair/delete.php. Published: 2024-02-16T00:00:00.000Z Updated: 2024-08-20T18:55:59.808Z Open on db.gcve.eu Reference links https://github.com/cqliuke/cve/blob/main/sql.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-1251`	vulnerable	2026-06-08 06:25:39.674210	Tongda OA 2017 delete.php sql injection MEDIUM (5.5) A vulnerability classified as critical has been found in Tongda OA 2017 up to 11.10. Affected is an unknown function of the file /general/email/outbox/delete.php. The manipulation of the argument DELETE_STR leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-252990 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Published: 2024-02-06T16:00:06.750Z Updated: 2024-08-19T20:13:25.946Z Open on db.gcve.eu Reference links https://vuldb.com/?id.252990 https://vuldb.com/?ctiid.252990 https://github.com/rockersiyuan/CVE/blob/main/TongDa%20Sql%20inject.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-10732`	vulnerable	2026-06-08 06:23:47.385246	Tongda OA 2017 index.php sql injection MEDIUM (6.3) A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /module/word_model/view/index.php. The manipulation of the argument query_str leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2024-11-03T11:00:06.122Z Updated: 2024-11-05T14:48:56.254Z Open on db.gcve.eu Reference links https://vuldb.com/?id.282901 https://vuldb.com/?ctiid.282901 https://vuldb.com/?submit.433532 https://github.com/LvZCh/td/issues/17	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-10656`	vulnerable	2026-06-08 06:23:47.202437	Tongda OA 2017 apply.php sql injection MEDIUM (6.3) A vulnerability was found in Tongda OA 2017 up to 11.9. It has been rated as critical. This issue affects some unknown processing of the file /pda/meeting/apply.php. The manipulation of the argument mr_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2024-11-01T14:31:04.576Z Updated: 2024-11-01T15:10:27.062Z Open on db.gcve.eu Reference links https://vuldb.com/?id.282671 https://vuldb.com/?ctiid.282671 https://vuldb.com/?submit.433517 https://github.com/LvZCh/td/issues/12	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-10655`	vulnerable	2026-06-08 06:23:47.201719	Tongda OA 2017 new.php sql injection MEDIUM (6.3) A vulnerability was found in Tongda OA 2017 up to 11.9. It has been declared as critical. This vulnerability affects unknown code of the file /pda/reportshop/new.php. The manipulation of the argument repid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2024-11-01T13:31:04.387Z Updated: 2024-11-01T14:40:09.422Z Open on db.gcve.eu Reference links https://vuldb.com/?id.282670 https://vuldb.com/?ctiid.282670 https://vuldb.com/?submit.433515 https://github.com/LvZCh/td/issues/11	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-10619`	vulnerable	2026-06-08 06:23:47.097725	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-10618`	vulnerable	2026-06-08 06:23:47.096891	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-10615`	vulnerable	2026-06-08 06:23:47.094737	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-10602`	vulnerable	2026-06-08 06:23:47.054793	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-10601`	vulnerable	2026-06-08 06:23:47.054212	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-10600`	vulnerable	2026-06-08 06:23:47.053505	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-10599`	vulnerable	2026-06-08 06:23:47.052560	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-7021`	vulnerable	2026-06-08 06:21:56.628620	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-5497`	vulnerable	2026-06-08 06:19:43.882045	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.