TI-2023-26688 CVE-2023-48930 · GHSA-w2c3-3jv2-f439
xinhu xinhuoa 2.2.1 contains a File upload vulnerability.
Priority HIGH 82
xinhu xinhuoa 2.2.1 contains a File upload vulnerability.
Rockoa
Records28All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9
Exploited now
Rockoa records in CISA KEVNo Rockoa vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
9 records in Xinhu · all components
TI-2024-37800 CVE-2024-57151 · GHSA-cqjc-pfg6-24mx
SQL Injection vulnerability in rainrocka xinhu v.2.6.5 and before allows a remote…
Priority HIGH 71
SQL Injection vulnerability in rainrocka xinhu v.2.6.5 and before allows a remote attacker to execute arbitrary code via the inputAction.php file and the saveAjax function
TI-2024-25087 CVE-2024-37624 · GHSA-w6vc-qv7j-67ph
Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting (XSS)…
Priority MEDIUM 60
Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the /chajian/inputChajian.php.
TI-2024-25086 CVE-2024-37623 · GHSA-5f56-q773-9mqx
Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting (XSS)…
Priority MEDIUM 60
Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the /kaoqin/tpl_kaoqin_locationchange.html component.
TI-2024-25085 CVE-2024-37622 · GHSA-gj92-fpwq-8c5r
Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting (XSS)…
Priority MEDIUM 60
Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the num parameter at /flow/flow.php.
TI-2024-06788 CVE-2024-7327 · GHSA-g8rf-63h9-mw87
Xinhu RockOA openmodhetongAction.php dataAction sql injection
Priority MEDIUM 57
A vulnerability classified as critical was found in Xinhu RockOA 2.6.2.
TI-2022-22140 CVE-2022-45041 · GHSA-m95m-9r23-75rh
SQL Injection exits in xinhu < 2.5.0
Priority MEDIUM 40
SQL Injection exits in xinhu < 2.5.0
TI-2020-17964 CVE-2020-35388 · GHSA-5m5r-ch84-vh95
rainrocka xinhu 2.1.9 allows remote attackers to obtain sensitive information via an…
Priority LOW 36
rainrocka xinhu 2.1.9 allows remote attackers to obtain sensitive information via an index.php?a=gettotal request in which the ajaxbool value is manipulated to be true.
TI-2024-32305 CVE-2024-48213 · GHSA-8rm2-54v5-9c84
RockOA v2.6.5 is vulnerable to Directory Traversal in webmain/system/beifen/beifenAction.php.
Priority LOW 21
RockOA v2.6.5 is vulnerable to Directory Traversal in webmain/system/beifen/beifenAction.php.