VYPR
Unrated severityNVD Advisory· Published Nov 3, 2024· Updated Nov 5, 2024

Tongda OA web_show.php sql injection

CVE-2024-10730

Description

A vulnerability, which was classified as critical, has been found in Tongda OA up to 11.6. This issue affects some unknown processing of the file /pda/appcenter/web_show.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected products

2
  • Cnoa/Oallm-fuzzy
    Range: <=11.6
  • Tongda/OAv5
    Range: 11.0

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.