CVE:CVE-2023-4165
CNNVD:CNNVD-202308-329
TONGDA Office Anywhere是一套协同办公OA系统。
TONGDA Office Anywhere 存在SQL注入漏洞，该漏洞源于对 general/system/seal_manage/iweboffice/delete_seal.php 页面的 DELETE_STR 操作会导致 SQL 注入。
solution:Upgrade tongda2000 tongda_oa to a higher version than 11.10,and avoid the version 11.10