tongda2000 kayıtları
tongda2000 üreticisine ait 60 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %38,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')56
- CWE-285 Improper Authorization1
- CWE-400 Uncontrolled Resource Consumption1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
60 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
43Planlayın | CVE-2023-4165Kavram kanıtı | Tongda OA delete_seal.php sql injectiontongda2000 · tongda office anywhere · CWE-89 | Kritik9,8 | — | %12,3 | 5 Ağu 2023 |
43Planlayın | CVE-2023-4166Kavram kanıtı | Tongda OA delete_log.php sql injectiontongda2000 · tongda office anywhere · CWE-89 | Kritik9,8 | — | %12,2 | 5 Ağu 2023 |
39İzleyin | CVE-2019-9759İstismar yok | An issue was discovered in TONGDA Office Anywhere 10.18.190121.tongda2000 · office anywhere · CWE-89 | Kritik9,8 | — | %1,4 | 2 Nis 2019 |
39İzleyin | CVE-2022-24206İstismar yok | Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in /mobile_seal/get_seal.php via the DEVICE_LIST parameter.tongda2000 · tongda office anywhere · CWE-89 | Kritik9,8 | — | %1,2 | 14 Şub 2022 |
39İzleyin | CVE-2022-23902İstismar yok | Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in export_data.php via the d_name parameter.tongda2000 · tongda office anywhere · CWE-89 | Kritik9,8 | — | %1,2 | 14 Şub 2022 |
39İzleyin | CVE-2023-6053İstismar yok | Tongda OA 2017 delete.php sql injectiontongda2000 · tongda office anywhere · CWE-89 | Kritik9,8 | — | %1,0 | 9 Kas 2023 |
39İzleyin | CVE-2023-6052İstismar yok | Tongda OA 2017 delete.php sql injectiontongda2000 · tongda office anywhere · CWE-89 | Kritik9,8 | — | %1,0 | 9 Kas 2023 |
39İzleyin | CVE-2022-25406İstismar yok | Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in delete_query.php via the DELETE_STR parameter.tongda2000 · tongda2000 · CWE-89 | Kritik9,8 | — | %1,0 | 24 Şub 2022 |
39İzleyin | CVE-2022-25404İstismar yok | Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in delete.php via the DELETE_STR parameter.tongda2000 · tongda2000 · CWE-89 | Kritik9,8 | — | %1,0 | 24 Şub 2022 |
39İzleyin | CVE-2022-25405İstismar yok | Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in change_box.php via the DELETE_STR parameter.tongda2000 · tongda2000 · CWE-89 | Kritik9,8 | — | %1,0 | 24 Şub 2022 |
39İzleyin | CVE-2023-6054İstismar yok | Tongda OA 2017 lock.php sql injectiontongda2000 · tongda office anywhere · CWE-89 | Kritik9,8 | — | %0,9 | 9 Kas 2023 |
39İzleyin | CVE-2023-5265İstismar yok | Tongda OA 2017 delete.php sql injectiontongda2000 · tongda office anywhere · CWE-89 | Kritik9,8 | — | %0,8 | 29 Eyl 2023 |
39İzleyin | CVE-2023-5261İstismar yok | Tongda OA 2017 delete.php sql injectiontongda2000 · tongda office anywhere · CWE-89 | Kritik9,8 | — | %0,8 | 29 Eyl 2023 |
39İzleyin | CVE-2023-5267İstismar yok | Tongda OA 2017 delete.php sql injectiontongda2000 · tongda office anywhere · CWE-89 | Kritik9,8 | — | %0,8 | 29 Eyl 2023 |
39İzleyin | CVE-2023-6084İstismar yok | Tongda OA 2017 delete.php sql injectiontongda2000 · tongda office anywhere · CWE-89 | Kritik9,8 | — | %0,8 | 12 Kas 2023 |
39İzleyin | CVE-2023-2738İstismar yok | Tongda OA GatewayController.php actionGetdata unrestricted uploadtongda2000 · tongda office anywhere · CWE-434 | Kritik9,8 | — | %0,8 | 16 May 2023 |
39İzleyin | CVE-2023-5019İstismar yok | Tongda OA delete.php sql injectiontongda2000 · tongda office anywhere · CWE-89 | Kritik9,8 | — | %0,7 | 17 Eyl 2023 |
39İzleyin | CVE-2024-25320İstismar yok | Tongda OA v2017 and up to v11.9 was discovered to contain a SQL injection vulnerability via the $AFF_ID parameter at /affair/delete.php.tongda2000 · office anywhere · CWE-89 | Kritik9,8 | — | %0,7 | 16 Şub 2024 |
39İzleyin | CVE-2023-5780İstismar yok | Tongda OA 2017 delete.php sql injectiontongda2000 · tongda office anywhere · CWE-89 | Kritik9,8 | — | %0,7 | 26 Eki 2023 |
39İzleyin | CVE-2023-7020İstismar yok | Tongda OA 2017 view.php sql injectiontongda2000 · office anywhere · CWE-89 | Kritik9,8 | — | %0,6 | 20 Ara 2023 |
39İzleyin | CVE-2023-7021İstismar yok | Tongda OA 2017 delete_search.php sql injectiontongda2000 · office anywhere · CWE-89 | Kritik9,8 | — | %0,6 | 20 Ara 2023 |
39İzleyin | CVE-2023-7022İstismar yok | Tongda OA 2017 delete_all.php sql injectiontongda2000 · office anywhere · CWE-89 | Kritik9,8 | — | %0,6 | 20 Ara 2023 |
39İzleyin | CVE-2023-7023İstismar yok | Tongda OA 2017 delete.php sql injectiontongda2000 · office anywhere · CWE-89 | Kritik9,8 | — | %0,6 | 20 Ara 2023 |
39İzleyin | CVE-2023-5682İstismar yok | Tongda OA delete.php sql injectiontongda2000 · tongda office anywhere · CWE-89 | Kritik9,8 | — | %0,6 | 20 Eki 2023 |
39İzleyin | CVE-2023-6885İstismar yok | Tongda OA 2017 delete.php sql injectiontongda2000 · tongda office anywhere · CWE-89 | Kritik9,8 | — | %0,6 | 16 Ara 2023 |
- CVE-2023-416543Planlayın
Tongda OA delete_seal.php sql injection
KritikCVSS 9,8Kavram kanıtıEPSS %12tongda2000 · tongda office anywhere5 Ağu 2023
- CVE-2023-416643Planlayın
Tongda OA delete_log.php sql injection
KritikCVSS 9,8Kavram kanıtıEPSS %12tongda2000 · tongda office anywhere5 Ağu 2023
- CVE-2019-975939İzleyin
An issue was discovered in TONGDA Office Anywhere 10.18.190121.
KritikCVSS 9,8İstismar yokEPSS %1tongda2000 · office anywhere2 Nis 2019
- CVE-2022-2420639İzleyin
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in /mobile_seal/get_seal.php via the DEVICE_LIST parameter.
KritikCVSS 9,8İstismar yokEPSS %1tongda2000 · tongda office anywhere14 Şub 2022
- CVE-2022-2390239İzleyin
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in export_data.php via the d_name parameter.
KritikCVSS 9,8İstismar yokEPSS %1tongda2000 · tongda office anywhere14 Şub 2022
- CVE-2023-605339İzleyin
Tongda OA 2017 delete.php sql injection
KritikCVSS 9,8İstismar yokEPSS %1tongda2000 · tongda office anywhere9 Kas 2023
- CVE-2023-605239İzleyin
Tongda OA 2017 delete.php sql injection
KritikCVSS 9,8İstismar yokEPSS %1tongda2000 · tongda office anywhere9 Kas 2023
- CVE-2022-2540639İzleyin
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in delete_query.php via the DELETE_STR parameter.
KritikCVSS 9,8İstismar yokEPSS %1tongda2000 · tongda200024 Şub 2022
- CVE-2022-2540439İzleyin
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in delete.php via the DELETE_STR parameter.
KritikCVSS 9,8İstismar yokEPSS %1tongda2000 · tongda200024 Şub 2022
- CVE-2022-2540539İzleyin
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in change_box.php via the DELETE_STR parameter.
KritikCVSS 9,8İstismar yokEPSS %1tongda2000 · tongda200024 Şub 2022
- CVE-2023-605439İzleyin
Tongda OA 2017 lock.php sql injection
KritikCVSS 9,8İstismar yokEPSS %0tongda2000 · tongda office anywhere9 Kas 2023
- CVE-2023-526539İzleyin
Tongda OA 2017 delete.php sql injection
KritikCVSS 9,8İstismar yokEPSS %0tongda2000 · tongda office anywhere29 Eyl 2023
- CVE-2023-526139İzleyin
Tongda OA 2017 delete.php sql injection
KritikCVSS 9,8İstismar yokEPSS %0tongda2000 · tongda office anywhere29 Eyl 2023
- CVE-2023-526739İzleyin
Tongda OA 2017 delete.php sql injection
KritikCVSS 9,8İstismar yokEPSS %0tongda2000 · tongda office anywhere29 Eyl 2023
- CVE-2023-608439İzleyin
Tongda OA 2017 delete.php sql injection
KritikCVSS 9,8İstismar yokEPSS %0tongda2000 · tongda office anywhere12 Kas 2023
- CVE-2023-273839İzleyin
Tongda OA GatewayController.php actionGetdata unrestricted upload
KritikCVSS 9,8İstismar yokEPSS %0tongda2000 · tongda office anywhere16 May 2023
- CVE-2023-501939İzleyin
Tongda OA delete.php sql injection
KritikCVSS 9,8İstismar yokEPSS %0tongda2000 · tongda office anywhere17 Eyl 2023
- CVE-2024-2532039İzleyin
Tongda OA v2017 and up to v11.9 was discovered to contain a SQL injection vulnerability via the $AFF_ID parameter at /affair/delete.php.
KritikCVSS 9,8İstismar yokEPSS %0tongda2000 · office anywhere16 Şub 2024
- CVE-2023-578039İzleyin
Tongda OA 2017 delete.php sql injection
KritikCVSS 9,8İstismar yokEPSS %0tongda2000 · tongda office anywhere26 Eki 2023
- CVE-2023-702039İzleyin
Tongda OA 2017 view.php sql injection
KritikCVSS 9,8İstismar yokEPSS %0tongda2000 · office anywhere20 Ara 2023
- CVE-2023-702139İzleyin
Tongda OA 2017 delete_search.php sql injection
KritikCVSS 9,8İstismar yokEPSS %0tongda2000 · office anywhere20 Ara 2023
- CVE-2023-702239İzleyin
Tongda OA 2017 delete_all.php sql injection
KritikCVSS 9,8İstismar yokEPSS %0tongda2000 · office anywhere20 Ara 2023
- CVE-2023-702339İzleyin
Tongda OA 2017 delete.php sql injection
KritikCVSS 9,8İstismar yokEPSS %0tongda2000 · office anywhere20 Ara 2023
- CVE-2023-568239İzleyin
Tongda OA delete.php sql injection
KritikCVSS 9,8İstismar yokEPSS %0tongda2000 · tongda office anywhere20 Eki 2023
- CVE-2023-688539İzleyin
Tongda OA 2017 delete.php sql injection
KritikCVSS 9,8İstismar yokEPSS %0tongda2000 · tongda office anywhere16 Ara 2023