CVE-2019-9759

An issue was discovered in TONGDA Office Anywhere 10.18.190121. There is a SQL Injection vulnerability via the general/approve_center/list/input_form/work_handle.php run_id parameter.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-04-02

Last modified

2024-08-04

Weaknesses

CWE-89

Affected products

• Office Anywhere (Tongda2000)

References

• http://expzh.com/TONGDA-OA-SQL-Injection.pdf