CVE-2024-10619

Summary

A vulnerability, which was classified as critical, was found in Tongda OA 2017 up to 11.10. Affected is an unknown function of the file /pda/reportshop/next_detail.php. The manipulation of the argument repid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected Software

VendorProductVersion RangeStatus
TongdaOA 201711.0affected
TongdaOA 201711.1affected
TongdaOA 201711.2affected
TongdaOA 201711.3affected
TongdaOA 201711.4affected
TongdaOA 201711.5affected
TongdaOA 201711.6affected
TongdaOA 201711.7affected
TongdaOA 201711.8affected
TongdaOA 201711.9affected
TongdaOA 201711.10affected

Weaknesses

  • CWE-89: SQL Injection

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: poc
    • Automatable: no
    • Technical Impact: partial

References