Tongda OA CHECK_SEAL.PHP SQL Injection Vulnerability (CVE-2024-10617)

Key Information Vulnerability Name: TONGDA OA UP TO 11.10 CHECK_SEAL.PHP ID SQL INJECTION Vulnerability ID: VDB-282628 CVE-2024-10617 Affected Versions: Tongda OA up to 11.10 Vulnerability Description: CVSS Meta Temp Score: 6.0 Current Exploit Price: $0-$5k CTI Interest Score: 1.26 Vulnerability Impact: CWE-89: SQL injection vulnerability Description: The manipulation of the argument with an unknown input leads to a SQL injection vulnerability. The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Impact: Confidentiality, Integrity, and Availability Vulnerability Disclosure: GitHub: github.com CVE ID: CVE-2024-10617 Exploit availability: The exploit has been disclosed to the public and may be used. Technical Details: Exploit availability: The technical details and a public exploit are known. MITRE ATT&CK: The attack technique is T1505. Exploitation Method: Remote exploitation: The attack can be initiated remotely. Google Hacking: By searching for , it is possible to find vulnerable targets. Recommended Actions: Countermeasures: There is no information about possible countermeasures known. Alternative product: It may be suggested to replace the affected object with an alternative product.

Goal Reached Thanks to every supporter — we hit 100%!

Tongda OA CHECK_SEAL.PHP SQL Injection Vulnerability (CVE-2024-10617)