CVE-2022-25406

Impact

Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in delete_query.php via the DELETE_STR parameter.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/dota-st/Vulnerability/blob/master/tongdaOA/V11.10_sql_2.md
• https://exchange.xforce.ibmcloud.com/vulnerabilities/220421
• https://github.com/dota-st/Vulnerability/blob/master/tongdaOA/V11.10_sql_2.md