← All advisories

Critical severity9.8NVD Advisory· Published Feb 24, 2022· Updated Jun 17, 2026

CVE-2022-25405

CVE-2022-25405

Description

Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in change_box.php via the DELETE_STR parameter.

Affected products

3

Tongda/Tongda2000llm-fuzzy
Range: = 11.10
Tongda2000/Tongda20002 versions
cpe:2.3:a:tongda2000:tongda2000:11.10:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:tongda2000:tongda2000:11.10:*:*:*:*:*:*:*
- (no CPE)

Patches

Vulnerability mechanics

References

2

exchange.xforce.ibmcloud.com/vulnerabilities/220422nvdThird Party Advisory
github.com/dota-st/Vulnerability/blob/master/tongdaOA/V11.10_sql_1.mdnvdBroken LinkThird Party Advisory

News mentions

0

No linked articles in our index yet.