CVE-2024-10731

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as critical, was found in Tongda OA up to 11.10. Affected is an unknown function of the file /pda/appcenter/check_seal.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
Tongda	OA	11.0; 11.1; 11.2; 11.3; 11.4; 11.5; 11.6; 11.7; 11.8; 11.9; 11.10
tongda	oa_2017	>= 11.0, <= 11.10

References

https://github.com/LvZCh/td/issues/16Exploit
https://vuldb.com/?ctiid.282900Permissions Required
https://vuldb.com/?id.282900Third Party Advisory
https://vuldb.com/?submit.433531Third Party Advisory

Timeline

Published: Nov 3, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-107329.8A vulnerability has been found in Tongda OA 2017 up to 11.10 and classified as critical. Affected by this vulnerability is an unknown functi CVE-2024-107339.8A vulnerability was found in code-projects Restaurant Order System 1.0 and classified as critical. Affected by this issue is some unknown fu CVE-2024-107349.8A vulnerability was found in Project Worlds Life Insurance Management System 1.0. It has been classified as critical. This affects an unknow CVE-2024-107359.8A vulnerability was found in Project Worlds Life Insurance Management System 1.0. It has been declared as critical. This vulnerability affec CVE-2024-107369.8A vulnerability was found in Codezips Free Exam Hall Seating Management System 1.0. It has been rated as critical. This issue affects some u CVE-2024-107379.8A vulnerability classified as critical has been found in Codezips Free Exam Hall Seating Management System 1.0. Affected is an unknown funct CVE-2024-107389.8A vulnerability classified as critical was found in itsourcecode Farm Management System 1.0. Affected by this vulnerability is an unknown fu CVE-2024-107399.8A vulnerability, which was classified as critical, has been found in code-projects E-Health Care System 1.0. Affected by this issue is some CVE-2024-10745.4The Beaver Builder – WordPress Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the audio widget 'link_url CVE-2024-107409.8A vulnerability, which was classified as critical, was found in code-projects E-Health Care System up to 1.0. This affects an unknown part o CVE-2024-107419.8A vulnerability has been found in code-projects E-Health Care System 1.0 and classified as critical. This vulnerability affects unknown code CVE-2024-107427.5A vulnerability was found in code-projects Wazifa System 1.0 and classified as critical. This issue affects some unknown processing of the f