Office Anywhere vulnerabilities
23 known vulnerabilities in Office Anywhere from Tongda2000. 23 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
OA 2017: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /module/word_model/view/index.php. The manipulation of the argument query_str leads to sql injection
- 9.8 Critical severity
OA: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in Tongda OA up to 11.10. Affected is an unknown function of the file /pda/appcenter/check_seal.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack re
- 9.8 Critical severity
OA: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in Tongda OA up to 11.6. This issue affects some unknown processing of the file /pda/appcenter/web_show.php. The manipulation of the argument ID leads to sql injection. The attack may be initiat
- 9.8 Critical severity
OA: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in Tongda OA up to 11.10. Affected by this vulnerability is an unknown functionality of the file /pda/approve_center/check_seal.php. The manipulation of the argument ID leads to sql injection. The attack can be
- 9.8 Critical severity
OA: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in Tongda OA up to 11.10. Affected is an unknown function of the file /pda/approve_center/prcs_info.php. The manipulation of the argument RUN_ID leads to sql injection. It is possible to launch the attack r
- 9.8 Critical severity
OA 2017: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Tongda OA 2017 up to 11.9. It has been rated as critical. This issue affects some unknown processing of the file /pda/meeting/apply.php. The manipulation of the argument mr_id leads to sql injection. The attack may be initiated rem
- 9.8 Critical severity
OA 2017: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Tongda OA 2017 up to 11.9. It has been declared as critical. This vulnerability affects unknown code of the file /pda/reportshop/new.php. The manipulation of the argument repid leads to sql injection. The attack can be initiated re
- 9.8 Critical severity
OA 2017: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in Tongda OA 2017 up to 11.10. Affected is an unknown function of the file /pda/reportshop/next_detail.php. The manipulation of the argument repid leads to sql injection. It is possible to launch the
- 9.8 Critical severity
OA 2017: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in Tongda OA 2017 up to 11.10. This issue affects some unknown processing of the file /pda/reportshop/record_detail.php. The manipulation of the argument repid leads to sql injection. The attack
- 9.8 Critical severity
OA: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in Tongda OA up to 11.10. This vulnerability affects unknown code of the file /pda/workflow/check_seal.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The e
- 9.8 Critical severity
OA: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in Tongda OA up to 11.9. This affects an unknown part of the file /pda/workflow/webSignSubmit.php. The manipulation of the argument saleId leads to sql injection. It is possible to initiate the attack remot
- 9.8 Critical severity
OA 2017: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Tongda OA 2017 up to 11.10. It has been rated as critical. Affected by this issue is some unknown functionality of the file /general/approve_center/query/list/input_form/delete_data_attach.php. The manipulation of the argument RUN_
- 9.8 Critical severity
OA 2017: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this issue is some unknown functionality of the file /general/approve_center/list/input_form/data_picker_link.php. The manipulation of the argument dataSrc leads to
- 9.8 Critical severity
OA 2017: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /general/address/private/address/query/delete.php. The manipulation of the argument where_repeat lea
- 9.8 Critical severity
OA 2017: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in Tongda OA 2017 up to 11.6. Affected is an unknown function of the file pda/appcenter/submenu.php. The manipulation of the argument appid leads to sql injection. It is possible to launch the attack
- 7.5 High severity
OA 2017: Allocation of Resources Without Limits or Throttling
A vulnerability, which was classified as problematic, has been found in Tongda OA 2017 up to 11.7. This issue affects some unknown processing of the file /inc/package_static_resources.php. The manipulation leads to resource consumption. The attack may be initi
- 9.8 Critical severity
OA 2017: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in Tongda OA 2017 up to 11.10. Affected is an unknown function of the file /general/email/outbox/delete.php. The manipulation of the argument DELETE_STR leads to sql injection. The exploit has been disclose
- 9.8 Critical severity
OA 2017: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, was found in Tongda OA 2017 up to 11.9. This affects an unknown part of the file /general/email/inbox/delete_webmail.php. The manipulation of the argument WEBBODY_ID_STR leads to sql injection. The exploit has
- 9.8 Critical severity
OA 2017: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Tongda OA 2017 up to 11.9. It has been rated as critical. Affected by this issue is some unknown functionality of the file general/vehicle/query/delete.php. The manipulation of the argument VU_ID leads to sql injection. The attack
- 9.8 Critical severity
OA 2017: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Tongda OA 2017 up to 11.9. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file general/work_plan/manage/delete_all.php. The manipulation of the argument DELETE_STR leads to sql i
- 9.8 Critical severity
OA 2017: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Tongda OA 2017 up to 11.9. It has been classified as critical. Affected is an unknown function of the file general/vehicle/checkup/delete_search.php. The manipulation of the argument VU_ID leads to sql injection. It is possible to
- 9.8 Critical severity
OA 2017: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. This issue affects some unknown processing of the file general/wiki/cp/ct/view.php. The manipulation of the argument TEMP_ID leads to sql injection. The attack may be initiated
- 8.8 High severity
OA 2017: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in Tongda OA 2017 11.10. Affected is an unknown function of the file general/hr/salary/welfare_manage/delete.php. The manipulation of the argument WELFARE_ID leads to sql injection. It is possible to launch