VendorsTongda2000office_anywhereall versions
Vulnerabilities

Tongda2000 Office Anywhere

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

27CVEs
CVE-2024-10600
Tongda OA 2017 submenu.php sql injection
Published 2024-10-31 · Analyzed
9.8EPSS 0.066
CVE-2019-9759
An issue was discovered in TONGDA Office Anywhere 10.18.190121. There is a SQL Injection vulnerability via the general/approve_center/list/input_form/work_handle.php run_id parameter.
Published 2019-04-02 · Modified
9.8EPSS 0.015
CVE-2024-25320
Tongda OA v2017 and up to v11.9 was discovered to contain a SQL injection vulnerability via the $AFF_ID parameter at /affair/delete.php.
Published 2024-02-16 · Analyzed
9.8EPSS 0.007
CVE-2024-10658
Tongda OA check_seal.php sql injection
Published 2024-11-01 · Analyzed
9.8EPSS 0.007
CVE-2024-10657
Tongda OA prcs_info.php sql injection
Published 2024-11-01 · Analyzed
9.8EPSS 0.007
CVE-2024-10656
Tongda OA 2017 apply.php sql injection
Published 2024-11-01 · Analyzed
9.8EPSS 0.007
CVE-2023-7020
Tongda OA 2017 view.php sql injection
Published 2023-12-21 · Modified
9.8EPSS 0.007
CVE-2023-7021
Tongda OA 2017 delete_search.php sql injection
Published 2023-12-21 · Analyzed
9.8EPSS 0.007
CVE-2023-7022
Tongda OA 2017 delete_all.php sql injection
Published 2023-12-21 · Modified
9.8EPSS 0.007
CVE-2023-7023
Tongda OA 2017 delete.php sql injection
Published 2023-12-21 · Modified
9.8EPSS 0.007
CVE-2024-0938
Tongda OA 2017 delete_webmail.php sql injection
Published 2024-01-26 · Modified
9.8EPSS 0.007
CVE-2024-1251
Tongda OA 2017 delete.php sql injection
Published 2024-02-06 · Analyzed
9.8EPSS 0.006
CVE-2024-10618
Tongda OA 2017 record_detail.php sql injection
Published 2024-11-01 · Analyzed
9.8EPSS 0.006
CVE-2024-10655
Tongda OA 2017 new.php sql injection
Published 2024-11-01 · Analyzed
9.8EPSS 0.006
CVE-2024-10619
Tongda OA 2017 next_detail.php sql injection
Published 2024-11-01 · Analyzed
9.8EPSS 0.006
CVE-2024-10617
Tongda OA check_seal.php sql injection
Published 2024-11-01 · Analyzed
9.8EPSS 0.006
CVE-2024-10616
Tongda OA webSignSubmit.php sql injection
Published 2024-11-01 · Analyzed
9.8EPSS 0.006
CVE-2024-10615
Tongda OA 2017 delete_data_attach.php sql injection
Published 2024-11-01 · Analyzed
9.8EPSS 0.006
CVE-2024-10602
Tongda OA 2017 data_picker_link.php sql injection
Published 2024-10-31 · Analyzed
9.8EPSS 0.006
CVE-2024-10601
Tongda OA 2017 delete.php sql injection
Published 2024-10-31 · Analyzed
9.8EPSS 0.006
CVE-2024-10731
Tongda OA check_seal.php sql injection
Published 2024-11-03 · Analyzed
9.8EPSS 0.005
CVE-2024-10730
Tongda OA web_show.php sql injection
Published 2024-11-03 · Analyzed
9.8EPSS 0.005
CVE-2024-10732
Tongda OA 2017 index.php sql injection
Published 2024-11-03 · Analyzed
9.8EPSS 0.005
CVE-2023-5497
Tongda OA 2017 delete.php sql injection
Published 2023-10-10 · Modified
8.8EPSS 0.007
CVE-2024-10599
Tongda OA 2017 package_static_resources.php resource consumption
Published 2024-10-31 · Analyzed
7.5EPSS 0.010
CVE-2024-10598
Tongda OA Annual Leave data.php improper authorization
Published 2024-10-31 · Analyzed
6.9EPSS 0.005
CVE-2023-7180
Tongda OA 2017 delete.php sql injection
Published 2023-12-30 · Modified
5.5EPSS 0.005