关键信息 1. 漏洞名称: - TONGDA OA 2017 UP TO 11.10 INDEX.PHP QUERY_STR SQL INJECTION 2. 受影响版本: - Tongda OA 2017 up to 11.10 3. CVSS Meta Temp Score: - 6.0 4. 当前漏洞价格: - $0-$5k 5. CTI Interest Score: - 2.18 6. 漏洞描述: - CWE-89: SQL injection vulnerability due to manipulation of the argument with an unknown input. - 影响: Affects confidentiality, integrity, and availability. - 攻击方式: Remote attack, public disclosure, and possible use. 7. 漏洞编号: - CVE-2024-10732 8. 漏洞利用: - GitHub: Available for download. - 技术细节: Known. - 公开漏洞: Known. - MITRE ATT&CK: Uses attack technique T1505. 9. 搜索建议: - Google Hacking: Use to find vulnerable targets. 10. 建议措施: - 替换受影响对象. 11. 相关漏洞: - VDB-254006, VDB-282611, VDB-282612, VDB-282613 总结 这个漏洞是一个SQL注入漏洞，影响Tongda OA 2017 up to 11.10版本。它可以通过远程攻击利用，且技术细节和公开漏洞信息已知。建议替换受影响的对象以防止进一步的安全风险。