CVE-2022-25405

Description

Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in change_box.php via the DELETE_STR parameter.

Affected Platforms

Weakness Type

CWE-89

References

• https://github.com/dota-st/Vulnerability/blob/master/tongdaOA/V11.10_sql_1.md
• https://exchange.xforce.ibmcloud.com/vulnerabilities/220422
• https://github.com/dota-st/Vulnerability/blob/master/tongdaOA/V11.10_sql_1.md