2024-02-16 17:01:16 +00:00
{
"id" : "CVE-2024-25320" ,
"sourceIdentifier" : "cve@mitre.org" ,
"published" : "2024-02-16T15:15:08.360" ,
2024-02-16 21:00:28 +00:00
"lastModified" : "2024-02-16T19:26:55.393" ,
"vulnStatus" : "Awaiting Analysis" ,
2024-02-16 17:01:16 +00:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "Tongda OA v2017 and up to v11.9 was discovered to contain a SQL injection vulnerability via the $AFF_ID parameter at /affair/delete.php."
2024-04-04 08:46:00 +00:00
} ,
{
"lang" : "es" ,
"value" : "Se descubri\u00f3 que Tongda OA v2017 y hasta v11.9 conten\u00eda una vulnerabilidad de inyecci\u00f3n SQL a trav\u00e9s del par\u00e1metro $AFF_ID en /affair/delete.php."
2024-02-16 17:01:16 +00:00
}
] ,
"metrics" : { } ,
"references" : [
{
"url" : "https://github.com/cqliuke/cve/blob/main/sql.md" ,
"source" : "cve@mitre.org"
}
]
}