漏洞描述
TONGDA Office Anywhere是一套协同办公OA系统。 TONGDA Office Anywhere 11.2至11.6版本存在授权问题漏洞，该漏洞源于不正确的授权。
TONGDA Office Anywhere 授权问题漏洞
PoC代码
暂无相关漏洞推荐
- 万户ezOFFICE协同平台 /defaultroot/iWebOfficeSign/OfficeServer.jsp/../../modules/hrm/report/customize/checkSQL_httprequest.jsp SQL 注入漏洞
- POC 普华科技 PowerPMS /PowerPlat/FormXml/DocFile/OfficeService.aspx 文件读取漏洞
- 普华 PowerPMS OfficeService.aspx SQL注入漏洞
- POC PageOffice /sealimage.zz 文件读取漏洞
- POC PageOffice /loginseal.zz 默认口令漏洞
- （CVE-2025-10035）Fortra GoAnywhere MFT License Servlet反序列化漏洞可能导致命令注入
- 泛微 E-Office /E-mobile/create/ajax_do.php 存在SQL注入漏洞
- 泛微 E-Office /E-mobile/diarydo.php存在SQL注入漏洞
- e-office-v10-officeserver-upload: 泛微OA E-Office OfficeServer.php 任意文件上传漏洞
- e-weaver-eoffice-webservice-upload-fileupload: E-Weaver EOffice webservice upload file upload
- 昂捷 ERP /EnjoyRMIS_WS/WS/OA/CWSOffice.asmx SQL 注入漏洞
- 昂捷-CRM-CWSOffice.asmx SQL注入
- 泛微E-Office /general/crm/record/detail.php SQL 注入漏洞