CVE-2024-1252

A vulnerability classified as critical was found in Tongda OA 2017 up to 11.9. Affected by this vulnerability is an unknown functionality of the file /general/attendance/manage/ask_duty/delete.php. The manipulation of the argument ASK_DUTY_ID leads to sql injection. The exploit has been disclosed to the public and may be used. Upgrading to version 11.10 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-252991.

• CWE-89

• https://github.com/b51s77/cve/blob/main/sql.mdExploit
• https://vuldb.com/?ctiid.252991Permissions Required, Third Party Advisory
• https://vuldb.com/?id.252991Third Party Advisory
• https://github.com/b51s77/cve/blob/main/sql.mdExploit
• https://vuldb.com/?ctiid.252991Permissions Required, Third Party Advisory
• https://vuldb.com/?id.252991Third Party Advisory

Published

Feb 6, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-12514The 3DVieweronline plugin for WordPress is vulnerable to Sto…6.4
• CVE-2024-12515The Muslim Prayer Time-Salah/Iqamah plugin for WordPress is …6.4
• CVE-2024-12516The Coupon Plugin plugin for WordPress is vulnerable to Stor…6.4
• CVE-2024-12517The WooCommerce Cart Count Shortcode plugin for WordPress is…6.4
• CVE-2024-12518The ShMapper by Teplitsa plugin for WordPress is vulnerable …6.4
• CVE-2024-12519The TCBD Auto Refresher plugin for WordPress is vulnerable t…6.4
• CVE-2024-12520The Dominion – Domain Checker for WPBakery plugin for WordPr…6.4
• CVE-2024-12521The Slotti Ajanvaraus plugin for WordPress is vulnerable to …6.4
• CVE-2024-12522The Yay! Forms | Embed Custom Forms, Surveys, and Quizzes Ea…6.4
• CVE-2024-12523The States Map US plugin for WordPress is vulnerable to Stor…6.4
• CVE-2024-12524The Clinked Client Portal plugin for WordPress is vulnerable…6.4
• CVE-2024-12525The Easy MLS Listings Import plugin for WordPress is vulnera…5.4