EUVD-2026-96877

A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.6. This impacts the function kqjcmdModel::returnchuli of the file webmain/task/openapi/openkqjAction.php of the component Openkqj Action. This manipulation of the argument ID causes sql injection. The attack is possible to be carri...

CVE-2026-108571

A SQL injection vulnerability exists in Xinhu Rainrock RockOA versions up to 2.7.6 . The flaw is located within the kqjcmdModel::returnchuli function in the webmain/task/openapi/openkqjAction.php file of the Openkqj Action component. Attackers can exploit this by manipulating the ID argument to p...