Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior
Críticas / altas1449▲ 87 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
29 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 0.65% | — | Tongda2000 Tongda Office Anywhere | 6/2/2024 | 17/6/2026 | A vulnerability classified as critical was found in Tongda OA 2017 up to 11.9. Affected by this vulnerability is an unknown functionality of the file /general/attendance/manage/ask_duty/delete.php. The manipulation of the argument ASK_DUTY_ID leads to sql injection. The exploit has been disclosed to the public and may… | |
| Modificada | Crítica (9.8) | 0.66% | — | Tongda2000 Tongda Office Anywhere | 16/12/2023 | 17/6/2026 | A vulnerability was found in Tongda OA 2017 up to 11.10. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file general/vote/manage/delete.php. The manipulation of the argument DELETE_STR leads to sql injection. The exploit has been disclosed to the public and may be… | |
| Modificada | Alta (7.5) | 0.64% | — | Tongda2000 Tongda OATongda2000 Tongda Office Anywhere | 8/12/2023 | 17/6/2026 | A vulnerability was found in Tongda OA 2017 up to 11.9. It has been declared as critical. This vulnerability affects unknown code of the file pda/pad/email/delete.php. The manipulation of the argument EMAIL_ID leads to sql injection. The exploit has been disclosed to the public and may be used. Upgrading to version… | |
| Modificada | Alta (7.5) | 0.64% | — | Tongda2000 Tongda OATongda2000 Tongda Office Anywhere | 8/12/2023 | 17/6/2026 | A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this issue is some unknown functionality of the file general/notify/manage/delete.php. The manipulation of the argument DELETE_STR leads to sql injection. The exploit has been disclosed to the public and may be used.… | |
| Modificada | Alta (7.5) | 0.72% | — | Tongda2000 Tongda Office Anywhere | 8/12/2023 | 17/6/2026 | A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical. Affected by this vulnerability is an unknown functionality of the file general/wiki/cp/manage/delete.php. The manipulation of the argument TERM_ID_STR leads to sql injection. The exploit has been disclosed to the public and may be… | |
| Modificada | Alta (7.5) | 0.63% | — | Tongda2000 Tongda Office Anywhere | 24/11/2023 | 17/6/2026 | A vulnerability classified as critical has been found in Tongda OA 2017 up to 11.9. This affects an unknown part of the file general/wiki/cp/ct/delete.php. The manipulation of the argument PROJ_ID_STR leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public… | |
| Modificada | Crítica (9.8) | 0.87% | — | Tongda2000 Tongda Office Anywhere | 12/11/2023 | 17/6/2026 | A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this issue is some unknown functionality of the file general/vehicle/checkup/delete.php. The manipulation of the argument VU_ID leads to sql injection. The exploit has been disclosed to the public and may be used. Upgrading… | |
| Modificada | Crítica (9.8) | 0.93% | — | Tongda2000 Tongda Office Anywhere | 9/11/2023 | 17/6/2026 | A vulnerability, which was classified as critical, was found in Tongda OA 2017 up to 11.9. This affects an unknown part of the file general/wiki/cp/manage/lock.php. The manipulation of the argument TERM_ID_STR leads to sql injection. The exploit has been disclosed to the public and may be used. Upgrading to version… | |
| Modificada | Crítica (9.8) | 1.0% | — | Tongda2000 Tongda Office Anywhere | 9/11/2023 | 17/6/2026 | A vulnerability, which was classified as critical, has been found in Tongda OA 2017 up to 11.9. Affected by this issue is some unknown functionality of the file general/system/censor_words/manage/delete.php. The manipulation of the argument DELETE_STR leads to sql injection. The exploit has been disclosed to the… | |
| Modificada | Crítica (9.8) | 1.0% | — | Tongda2000 Tongda Office Anywhere | 9/11/2023 | 17/6/2026 | A vulnerability classified as critical has been found in Tongda OA 2017 up to 11.9. Affected is an unknown function of the file general/system/censor_words/module/delete.php. The manipulation of the argument DELETE_STR leads to sql injection. The exploit has been disclosed to the public and may be used. Upgrading to… | |
| Modificada | Alta (7.5) | 0.54% | — | Tongda2000 Tongda Office Anywhere | 26/10/2023 | 17/6/2026 | A vulnerability has been found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this vulnerability is an unknown functionality of the file general/system/approve_center/flow_sort/flow/delete.php. The manipulation of the argument id/sort_parent leads to sql injection. The attack can be launched… | |
| Modificada | Crítica (9.8) | 0.66% | — | Tongda2000 Tongda Office Anywhere | 26/10/2023 | 17/6/2026 | A vulnerability, which was classified as critical, was found in Tongda OA 2017 up to 11.10. Affected is an unknown function of the file /manage/delete_query.php of the component General News. The manipulation of the argument NEWS_ID leads to sql injection. The exploit has been disclosed to the public and may be used.… | |
| Modificada | Crítica (9.8) | 0.66% | — | Tongda2000 Tongda Office Anywhere | 26/10/2023 | 17/6/2026 | A vulnerability, which was classified as critical, has been found in Tongda OA 2017 11.10. This issue affects the function DELETE_STR of the file general/system/res_manage/monitor/delete_webmail.php. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the… | |
| Modificada | Crítica (9.8) | 0.72% | — | Tongda2000 Tongda Office Anywhere | 26/10/2023 | 17/6/2026 | A vulnerability classified as critical was found in Tongda OA 2017 11.10. This vulnerability affects unknown code of the file general/system/approve_center/flow_guide/flow_type/set_print/delete.php. The manipulation of the argument DELETE_STR leads to sql injection. The attack can be initiated remotely. The exploit… | |
| Modificada | Crítica (9.8) | 0.67% | — | Tongda2000 Tongda Office Anywhere | 20/10/2023 | 17/6/2026 | A vulnerability has been found in Tongda OA 2017 and classified as critical. This vulnerability affects unknown code of the file general/hr/training/record/delete.php. The manipulation of the argument RECORD_ID leads to sql injection. The exploit has been disclosed to the public and may be used. Upgrading to version… | |
| Modificada | Alta (7.5) | 0.66% | — | Tongda2000 Tongda Office Anywhere | 30/9/2023 | 17/6/2026 | A vulnerability was found in Tongda OA 2017. It has been rated as critical. Affected by this issue is some unknown functionality of the file general/hr/recruit/requirements/delete.php. The manipulation of the argument REQUIREMENTS_ID leads to sql injection. The exploit has been disclosed to the public and may be used.… | |
| Modificada | Alta (7.5) | 0.70% | — | Tongda2000 Tongda Office Anywhere | 29/9/2023 | 17/6/2026 | A vulnerability classified as critical was found in Tongda OA 2017. Affected by this vulnerability is an unknown functionality of the file general/hr/recruit/recruitment/delete.php. The manipulation of the argument RECRUITMENT_ID leads to sql injection. The attack can be launched remotely. The exploit has been… | |
| Modificada | Crítica (9.8) | 0.89% | — | Tongda2000 Tongda Office Anywhere | 29/9/2023 | 17/6/2026 | A vulnerability has been found in Tongda OA 2017 and classified as critical. This vulnerability affects unknown code of the file general/hr/recruit/hr_pool/delete.php. The manipulation of the argument EXPERT_ID leads to sql injection. The exploit has been disclosed to the public and may be used. Upgrading to version… | |
| Modificada | Crítica (9.8) | 0.89% | — | Tongda2000 Tongda Office Anywhere | 29/9/2023 | 17/6/2026 | A vulnerability, which was classified as critical, has been found in Tongda OA 2017. Affected by this issue is some unknown functionality of the file general/hr/manage/staff_transfer/delete.php. The manipulation of the argument TRANSFER_ID leads to sql injection. The exploit has been disclosed to the public and may be… | |
| Modificada | Crítica (9.8) | 0.89% | — | Tongda2000 Tongda Office Anywhere | 29/9/2023 | 17/6/2026 | A vulnerability, which was classified as critical, was found in Tongda OA 2017. Affected is an unknown function of the file general/hr/manage/staff_title_evaluation/delete.php. The manipulation of the argument EVALUATION_ID leads to sql injection. The exploit has been disclosed to the public and may be used. Upgrading… | |
| Modificada | Alta (8.8) | 0.64% | — | Tongda2000 Tongda Office Anywhere | 17/9/2023 | 17/6/2026 | A vulnerability has been found in Tongda OA up to 11.10 and classified as critical. This vulnerability affects unknown code of the file general/hr/recruit/plan/delete.php. The manipulation of the argument PLAN_ID leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of… | |
| Modificada | Media (6.1) | 0.56% | — | Tongda2000 Tongda Office Anywhere | 17/9/2023 | 17/6/2026 | A vulnerability classified as problematic has been found in Tongda OA 11.10. Affected is an unknown function of the file /general/ipanel/menu_code.php?MENU_TYPE=FAV. The manipulation of the argument OA_SUB_WINDOW leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been… | |
| Modificada | Alta (8.8) | 0.64% | — | Tongda2000 Tongda Office Anywhere | 17/9/2023 | 17/6/2026 | A vulnerability was found in Tongda OA 2017 and classified as critical. Affected by this issue is some unknown functionality of the file general/hr/manage/staff_relatives/delete.php. The manipulation of the argument RELATIVES_ID leads to sql injection. The exploit has been disclosed to the public and may be used. The… | |
| Modificada | Crítica (9.8) | 0.80% | — | Tongda2000 Tongda Office Anywhere | 17/9/2023 | 17/6/2026 | A vulnerability classified as critical was found in Tongda OA. This vulnerability affects unknown code of the file general/hr/manage/staff_reinstatement/delete.php. The manipulation of the argument REINSTATEMENT_ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the… | |
| Modificada | Crítica (9.8) | 12% | 💥 PoC | Tongda2000 Tongda Office Anywhere | 5/8/2023 | 17/6/2026 | A vulnerability has been found in Tongda OA and classified as critical. This vulnerability affects unknown code of the file general/system/seal_manage/dianju/delete_log.php. The manipulation of the argument DELETE_STR leads to sql injection. The exploit has been disclosed to the public and may be used. Upgrading to… |