tongda2000 records
60 published records for vendor tongda2000.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 38.3%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')56
- CWE-285 Improper Authorization1
- CWE-400 Uncontrolled Resource Consumption1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
60 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
43Plan | CVE-2023-4165Proof of concept | Tongda OA delete_seal.php sql injectiontongda2000 · tongda office anywhere · CWE-89 | Critical9.8 | — | 12.3% | Aug 5, 2023 |
43Plan | CVE-2023-4166Proof of concept | Tongda OA delete_log.php sql injectiontongda2000 · tongda office anywhere · CWE-89 | Critical9.8 | — | 12.2% | Aug 5, 2023 |
39Monitor | CVE-2019-9759No exploit | An issue was discovered in TONGDA Office Anywhere 10.18.190121.tongda2000 · office anywhere · CWE-89 | Critical9.8 | — | 1.4% | Apr 2, 2019 |
39Monitor | CVE-2022-24206No exploit | Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in /mobile_seal/get_seal.php via the DEVICE_LIST parameter.tongda2000 · tongda office anywhere · CWE-89 | Critical9.8 | — | 1.2% | Feb 14, 2022 |
39Monitor | CVE-2022-23902No exploit | Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in export_data.php via the d_name parameter.tongda2000 · tongda office anywhere · CWE-89 | Critical9.8 | — | 1.2% | Feb 14, 2022 |
39Monitor | CVE-2023-6053No exploit | Tongda OA 2017 delete.php sql injectiontongda2000 · tongda office anywhere · CWE-89 | Critical9.8 | — | 1.0% | Nov 9, 2023 |
39Monitor | CVE-2023-6052No exploit | Tongda OA 2017 delete.php sql injectiontongda2000 · tongda office anywhere · CWE-89 | Critical9.8 | — | 1.0% | Nov 9, 2023 |
39Monitor | CVE-2022-25406No exploit | Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in delete_query.php via the DELETE_STR parameter.tongda2000 · tongda2000 · CWE-89 | Critical9.8 | — | 1.0% | Feb 24, 2022 |
39Monitor | CVE-2022-25404No exploit | Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in delete.php via the DELETE_STR parameter.tongda2000 · tongda2000 · CWE-89 | Critical9.8 | — | 1.0% | Feb 24, 2022 |
39Monitor | CVE-2022-25405No exploit | Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in change_box.php via the DELETE_STR parameter.tongda2000 · tongda2000 · CWE-89 | Critical9.8 | — | 1.0% | Feb 24, 2022 |
39Monitor | CVE-2023-6054No exploit | Tongda OA 2017 lock.php sql injectiontongda2000 · tongda office anywhere · CWE-89 | Critical9.8 | — | 0.9% | Nov 9, 2023 |
39Monitor | CVE-2023-5265No exploit | Tongda OA 2017 delete.php sql injectiontongda2000 · tongda office anywhere · CWE-89 | Critical9.8 | — | 0.8% | Sep 29, 2023 |
39Monitor | CVE-2023-5261No exploit | Tongda OA 2017 delete.php sql injectiontongda2000 · tongda office anywhere · CWE-89 | Critical9.8 | — | 0.8% | Sep 29, 2023 |
39Monitor | CVE-2023-5267No exploit | Tongda OA 2017 delete.php sql injectiontongda2000 · tongda office anywhere · CWE-89 | Critical9.8 | — | 0.8% | Sep 29, 2023 |
39Monitor | CVE-2023-6084No exploit | Tongda OA 2017 delete.php sql injectiontongda2000 · tongda office anywhere · CWE-89 | Critical9.8 | — | 0.8% | Nov 12, 2023 |
39Monitor | CVE-2023-2738No exploit | Tongda OA GatewayController.php actionGetdata unrestricted uploadtongda2000 · tongda office anywhere · CWE-434 | Critical9.8 | — | 0.8% | May 16, 2023 |
39Monitor | CVE-2023-5019No exploit | Tongda OA delete.php sql injectiontongda2000 · tongda office anywhere · CWE-89 | Critical9.8 | — | 0.7% | Sep 17, 2023 |
39Monitor | CVE-2023-5682No exploit | Tongda OA delete.php sql injectiontongda2000 · tongda office anywhere · CWE-89 | Critical9.8 | — | 0.7% | Oct 20, 2023 |
39Monitor | CVE-2024-25320No exploit | Tongda OA v2017 and up to v11.9 was discovered to contain a SQL injection vulnerability via the $AFF_ID parameter at /affair/delete.php.tongda2000 · office anywhere · CWE-89 | Critical9.8 | — | 0.7% | Feb 16, 2024 |
39Monitor | CVE-2023-5780No exploit | Tongda OA 2017 delete.php sql injectiontongda2000 · tongda office anywhere · CWE-89 | Critical9.8 | — | 0.7% | Oct 26, 2023 |
39Monitor | CVE-2023-7020No exploit | Tongda OA 2017 view.php sql injectiontongda2000 · office anywhere · CWE-89 | Critical9.8 | — | 0.6% | Dec 20, 2023 |
39Monitor | CVE-2023-7021No exploit | Tongda OA 2017 delete_search.php sql injectiontongda2000 · office anywhere · CWE-89 | Critical9.8 | — | 0.6% | Dec 20, 2023 |
39Monitor | CVE-2023-7022No exploit | Tongda OA 2017 delete_all.php sql injectiontongda2000 · office anywhere · CWE-89 | Critical9.8 | — | 0.6% | Dec 20, 2023 |
39Monitor | CVE-2023-7023No exploit | Tongda OA 2017 delete.php sql injectiontongda2000 · office anywhere · CWE-89 | Critical9.8 | — | 0.6% | Dec 20, 2023 |
39Monitor | CVE-2023-6885No exploit | Tongda OA 2017 delete.php sql injectiontongda2000 · tongda office anywhere · CWE-89 | Critical9.8 | — | 0.6% | Dec 16, 2023 |
- CVE-2023-416543Plan
Tongda OA delete_seal.php sql injection
CriticalCVSS 9.8Proof of conceptEPSS 12%tongda2000 · tongda office anywhereAug 5, 2023
- CVE-2023-416643Plan
Tongda OA delete_log.php sql injection
CriticalCVSS 9.8Proof of conceptEPSS 12%tongda2000 · tongda office anywhereAug 5, 2023
- CVE-2019-975939Monitor
An issue was discovered in TONGDA Office Anywhere 10.18.190121.
CriticalCVSS 9.8No exploitEPSS 1%tongda2000 · office anywhereApr 2, 2019
- CVE-2022-2420639Monitor
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in /mobile_seal/get_seal.php via the DEVICE_LIST parameter.
CriticalCVSS 9.8No exploitEPSS 1%tongda2000 · tongda office anywhereFeb 14, 2022
- CVE-2022-2390239Monitor
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in export_data.php via the d_name parameter.
CriticalCVSS 9.8No exploitEPSS 1%tongda2000 · tongda office anywhereFeb 14, 2022
- CVE-2023-605339Monitor
Tongda OA 2017 delete.php sql injection
CriticalCVSS 9.8No exploitEPSS 1%tongda2000 · tongda office anywhereNov 9, 2023
- CVE-2023-605239Monitor
Tongda OA 2017 delete.php sql injection
CriticalCVSS 9.8No exploitEPSS 1%tongda2000 · tongda office anywhereNov 9, 2023
- CVE-2022-2540639Monitor
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in delete_query.php via the DELETE_STR parameter.
CriticalCVSS 9.8No exploitEPSS 1%tongda2000 · tongda2000Feb 24, 2022
- CVE-2022-2540439Monitor
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in delete.php via the DELETE_STR parameter.
CriticalCVSS 9.8No exploitEPSS 1%tongda2000 · tongda2000Feb 24, 2022
- CVE-2022-2540539Monitor
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in change_box.php via the DELETE_STR parameter.
CriticalCVSS 9.8No exploitEPSS 1%tongda2000 · tongda2000Feb 24, 2022
- CVE-2023-605439Monitor
Tongda OA 2017 lock.php sql injection
CriticalCVSS 9.8No exploitEPSS 0%tongda2000 · tongda office anywhereNov 9, 2023
- CVE-2023-526539Monitor
Tongda OA 2017 delete.php sql injection
CriticalCVSS 9.8No exploitEPSS 0%tongda2000 · tongda office anywhereSep 29, 2023
- CVE-2023-526139Monitor
Tongda OA 2017 delete.php sql injection
CriticalCVSS 9.8No exploitEPSS 0%tongda2000 · tongda office anywhereSep 29, 2023
- CVE-2023-526739Monitor
Tongda OA 2017 delete.php sql injection
CriticalCVSS 9.8No exploitEPSS 0%tongda2000 · tongda office anywhereSep 29, 2023
- CVE-2023-608439Monitor
Tongda OA 2017 delete.php sql injection
CriticalCVSS 9.8No exploitEPSS 0%tongda2000 · tongda office anywhereNov 12, 2023
- CVE-2023-273839Monitor
Tongda OA GatewayController.php actionGetdata unrestricted upload
CriticalCVSS 9.8No exploitEPSS 0%tongda2000 · tongda office anywhereMay 16, 2023
- CVE-2023-501939Monitor
Tongda OA delete.php sql injection
CriticalCVSS 9.8No exploitEPSS 0%tongda2000 · tongda office anywhereSep 17, 2023
- CVE-2023-568239Monitor
Tongda OA delete.php sql injection
CriticalCVSS 9.8No exploitEPSS 0%tongda2000 · tongda office anywhereOct 20, 2023
- CVE-2024-2532039Monitor
Tongda OA v2017 and up to v11.9 was discovered to contain a SQL injection vulnerability via the $AFF_ID parameter at /affair/delete.php.
CriticalCVSS 9.8No exploitEPSS 0%tongda2000 · office anywhereFeb 16, 2024
- CVE-2023-578039Monitor
Tongda OA 2017 delete.php sql injection
CriticalCVSS 9.8No exploitEPSS 0%tongda2000 · tongda office anywhereOct 26, 2023
- CVE-2023-702039Monitor
Tongda OA 2017 view.php sql injection
CriticalCVSS 9.8No exploitEPSS 0%tongda2000 · office anywhereDec 20, 2023
- CVE-2023-702139Monitor
Tongda OA 2017 delete_search.php sql injection
CriticalCVSS 9.8No exploitEPSS 0%tongda2000 · office anywhereDec 20, 2023
- CVE-2023-702239Monitor
Tongda OA 2017 delete_all.php sql injection
CriticalCVSS 9.8No exploitEPSS 0%tongda2000 · office anywhereDec 20, 2023
- CVE-2023-702339Monitor
Tongda OA 2017 delete.php sql injection
CriticalCVSS 9.8No exploitEPSS 0%tongda2000 · office anywhereDec 20, 2023
- CVE-2023-688539Monitor
Tongda OA 2017 delete.php sql injection
CriticalCVSS 9.8No exploitEPSS 0%tongda2000 · tongda office anywhereDec 16, 2023