Approved changes feed: RSS · Atom

cpe:2.3:a:tongda:oa_2017:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTongda (7ecdec4f-b098-5fdc-82b6-7845ac692182)
ProductOa 2017 (d189c495-d1d7-5376-84ef-22cd850b9373)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-1252 vulnerable 2026-06-08 06:25:39.674897 Tongda OA 2017 delete.php sql injection
MEDIUM (5.5)
A vulnerability classified as critical was found in Tongda OA 2017 up to 11.9. Affected by this vulnerability is an unknown functionality of the file /general/attendance/manage/ask_duty/delete.php. The manipulation of the argument ASK_DUTY_ID leads to sql injection. The exploit has been disclosed to the public and may be used. Upgrading to version 11.10 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-252991.
Published: 2024-02-06T16:31:03.742Z
Updated: 2025-06-17T21:29:27.590Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1251 vulnerable 2026-06-08 06:25:39.672147 Tongda OA 2017 delete.php sql injection
MEDIUM (5.5)
A vulnerability classified as critical has been found in Tongda OA 2017 up to 11.10. Affected is an unknown function of the file /general/email/outbox/delete.php. The manipulation of the argument DELETE_STR leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-252990 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-02-06T16:00:06.750Z
Updated: 2024-08-19T20:13:25.946Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10732 vulnerable 2026-06-08 06:23:47.385072 Tongda OA 2017 index.php sql injection
MEDIUM (6.3)
A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /module/word_model/view/index.php. The manipulation of the argument query_str leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-11-03T11:00:06.122Z
Updated: 2024-11-05T14:48:56.254Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10731 vulnerable 2026-06-08 06:23:47.384208 Tongda OA check_seal.php sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, was found in Tongda OA up to 11.10. Affected is an unknown function of the file /pda/appcenter/check_seal.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-11-03T10:00:06.884Z
Updated: 2024-11-05T14:50:01.087Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10730 vulnerable 2026-06-08 06:23:47.383493 Tongda OA web_show.php sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, has been found in Tongda OA up to 11.6. This issue affects some unknown processing of the file /pda/appcenter/web_show.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-11-03T08:31:04.530Z
Updated: 2024-11-05T14:50:55.422Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10656 vulnerable 2026-06-08 06:23:47.202280 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10655 vulnerable 2026-06-08 06:23:47.201529 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10619 vulnerable 2026-06-08 06:23:47.097554 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10618 vulnerable 2026-06-08 06:23:47.096823 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10617 vulnerable 2026-06-08 06:23:47.096120 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10616 vulnerable 2026-06-08 06:23:47.095361 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10615 vulnerable 2026-06-08 06:23:47.094536 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10602 vulnerable 2026-06-08 06:23:47.054725 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10601 vulnerable 2026-06-08 06:23:47.054028 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10600 vulnerable 2026-06-08 06:23:47.053243 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10599 vulnerable 2026-06-08 06:23:47.050198 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10598 vulnerable 2026-06-08 06:23:47.047554 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-0938 vulnerable 2026-06-08 06:22:03.176624 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-7180 vulnerable 2026-06-08 06:21:57.197643 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-7023 vulnerable 2026-06-08 06:21:56.629683 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-7022 vulnerable 2026-06-08 06:21:56.629169 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-7021 vulnerable 2026-06-08 06:21:56.626269 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-7020 vulnerable 2026-06-08 06:21:56.623246 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6885 vulnerable 2026-06-08 06:21:56.144084 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6611 vulnerable 2026-06-08 06:21:55.098858 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6608 vulnerable 2026-06-08 06:21:55.092847 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6607 vulnerable 2026-06-08 06:21:55.089782 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6276 vulnerable 2026-06-08 06:19:46.834825 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6084 vulnerable 2026-06-08 06:19:45.538562 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6054 vulnerable 2026-06-08 06:19:45.467464 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6053 vulnerable 2026-06-08 06:19:45.466821 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6052 vulnerable 2026-06-08 06:19:45.466325 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5783 vulnerable 2026-06-08 06:19:44.716697 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5782 vulnerable 2026-06-08 06:19:44.716061 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5781 vulnerable 2026-06-08 06:19:44.715691 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5780 vulnerable 2026-06-08 06:19:44.715200 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5497 vulnerable 2026-06-08 06:19:43.880034 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5298 vulnerable 2026-06-08 06:19:43.119295 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5285 vulnerable 2026-06-08 06:19:43.086162 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5267 vulnerable 2026-06-08 06:19:43.067608 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5265 vulnerable 2026-06-08 06:19:43.064171 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5261 vulnerable 2026-06-08 06:19:43.057605 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.