CVE-2019-11362

app/controllers/frontend/PostController.php in ROCBOSS V2.2.1 has SQL injection via the Post:doReward score paramter, as demonstrated by the /do/reward/3 URI...

CVE-2019-11362

app/controllers/frontend/PostController.php in ROCBOSS V2.2.1 has SQL injection via the Post:doReward score paramter, as demonstrated by the /do/reward/3 URI...

CVE-2019-11362: Improper Neutralization of Special Elements used in an SQL Command

app/controllers/frontend/PostController.php in ROCBOSS V2.2.1 has SQL injection via the Post:doReward score paramter, as demonstrated by the /do/reward/3 URI...

PT-2019-12257

Name of the Vulnerable Software and Affected Versions ROCBOSS version 2.2.1 Description The issue concerns a SQL injection vulnerability. It is exploited via the score parameter in the Post:doReward function, as demonstrated by the "/do/reward/3" API endpoint. Recommendations For version 2.2.1,...