VYPR

Tongda Office Anywhere

by Tongda2000

CVEs (26)

  • CVE-2023-5267MedSep 29, 2023
    risk 0.36cvss 5.5epss 0.01

    A vulnerability has been found in Tongda OA 2017 and classified as critical. This vulnerability affects unknown code of the file general/hr/recruit/hr_pool/delete.php. The manipulation of the argument EXPERT_ID leads to sql injection. The exploit has been disclosed to the public…

  • CVE-2023-5265MedSep 29, 2023
    risk 0.36cvss 5.5epss 0.01

    A vulnerability, which was classified as critical, has been found in Tongda OA 2017. Affected by this issue is some unknown functionality of the file general/hr/manage/staff_transfer/delete.php. The manipulation of the argument TRANSFER_ID leads to sql injection. The exploit has…

  • CVE-2023-5261MedSep 29, 2023
    risk 0.36cvss 5.5epss 0.01

    A vulnerability, which was classified as critical, was found in Tongda OA 2017. Affected is an unknown function of the file general/hr/manage/staff_title_evaluation/delete.php. The manipulation of the argument EVALUATION_ID leads to sql injection. The exploit has been disclosed…

  • CVE-2023-5030MedSep 17, 2023
    risk 0.36cvss 5.5epss 0.01

    A vulnerability has been found in Tongda OA up to 11.10 and classified as critical. This vulnerability affects unknown code of the file general/hr/recruit/plan/delete.php. The manipulation of the argument PLAN_ID leads to sql injection. The exploit has been disclosed to the…

  • CVE-2023-5023MedSep 17, 2023
    risk 0.36cvss 5.5epss 0.01

    A vulnerability was found in Tongda OA 2017 and classified as critical. Affected by this issue is some unknown functionality of the file general/hr/manage/staff_relatives/delete.php. The manipulation of the argument RELATIVES_ID leads to sql injection. The exploit has been…

  • CVE-2023-5026LowSep 17, 2023
    risk 0.23cvss 3.5epss 0.00

    A vulnerability classified as problematic has been found in Tongda OA 11.10. Affected is an unknown function of the file /general/ipanel/menu_code.php?MENU_TYPE=FAV. The manipulation of the argument OA_SUB_WINDOW leads to cross site scripting. It is possible to launch the attack…

Page 2 of 2