CVE-2022-25405

Impact

Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in change_box.php via the DELETE_STR parameter.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/dota-st/Vulnerability/blob/master/tongdaOA/V11.10_sql_1.md
• https://exchange.xforce.ibmcloud.com/vulnerabilities/220422
• https://github.com/dota-st/Vulnerability/blob/master/tongdaOA/V11.10_sql_1.md