CVE-2026-111649

Rocboss paopao-ce through 0.6.0-alpha.3 contains an insecure direct object reference vulnerability in DownloadAttachment that allows authenticated users to access private media by supplying arbitrary content IDs. Attackers can enumerate sequential postcontent ids via the /v1/attachment endpoint t...

CVE-2026-111649

The software Rocboss paopao-ce (versions through 0.6.0-alpha.3 ) is vulnerable to an Insecure Direct Object Reference (IDOR) flaw in the DownloadAttachment function. This vulnerability allows authenticated users to access private media, including images, videos, and other attachments intended for...

CVE-2026-111649

Rocboss paopao-ce through 0.6.0-alpha.3 contains an insecure direct object reference vulnerability in DownloadAttachment that allows authenticated users to access private media by supplying arbitrary content IDs. Attackers can enumerate sequential postcontent ids via the /v1/attachment endpoint t...

CVE-2026-111649 Rocboss paopao-ce through 0.6.0-alpha.3 IDOR via DownloadAttachment Endpoint

Rocboss paopao-ce through 0.6.0-alpha.3 contains an insecure direct object reference vulnerability in DownloadAttachment that allows authenticated users to access private media by supplying arbitrary content IDs. Attackers can enumerate sequential postcontent ids via the /v1/attachment endpoint t...

CVE-2026-111649 Rocboss paopao-ce through 0.6.0-alpha.3 IDOR via DownloadAttachment Endpoint

Rocboss paopao-ce through 0.6.0-alpha.3 contains an insecure direct object reference vulnerability in DownloadAttachment that allows authenticated users to access private media by supplying arbitrary content IDs. Attackers can enumerate sequential postcontent ids via the /v1/attachment endpoint t...

CVE-2026-111649 Rocboss paopao-ce through 0.6.0-alpha.3 IDOR via DownloadAttachment Endpoint

Rocboss paopao-ce through 0.6.0-alpha.3 contains an insecure direct object reference vulnerability in DownloadAttachment that allows authenticated users to access private media by supplying arbitrary content IDs. Attackers can enumerate sequential postcontent ids via the /v1/attachment endpoint t...

EUVD-2026-103071

Rocboss paopao-ce through 0.6.0-alpha.3 contains an insecure direct object reference vulnerability in DownloadAttachment that allows authenticated users to access private media by supplying arbitrary content IDs. Attackers can enumerate sequential postcontent ids via the /v1/attachment endpoint t...

PT-2026-116048

🚨 CVE-2026-111649 Rocboss paopao-ce through 0.6.0-alpha.3 contains an insecure direct object reference vulnerability in DownloadAttachment that allows authenticated users to access private media by supplying arbitrary content IDs. Attackers can enumerate sequential post content ids via the...

CVE-2026-111649: Authorization Bypass Through User-Controlled Key

Rocboss paopao-ce through 0.6.0-alpha.3 contains an insecure direct object reference vulnerability in DownloadAttachment that allows authenticated users to access private media by supplying arbitrary content IDs. Attackers can enumerate sequential postcontent ids via the /v1/attachment endpoint t...

CVE-2019-11362

app/controllers/frontend/PostController.php in ROCBOSS V2.2.1 has SQL injection via the Post:doReward score paramter, as demonstrated by the /do/reward/3 URI...

EUVD-2019-3040

Malware in sbrugna...

CVE-2019-11362

app/controllers/frontend/PostController.php in ROCBOSS V2.2.1 has SQL injection via the Post:doReward score paramter, as demonstrated by the /do/reward/3 URI...

CVE-2019-11362

app/controllers/frontend/PostController.php in ROCBOSS V2.2.1 has SQL injection via the Post:doReward score paramter, as demonstrated by the /do/reward/3 URI...

Sql injection

app/controllers/frontend/PostController.php in ROCBOSS V2.2.1 has SQL injection via the Post:doReward score paramter, as demonstrated by the /do/reward/3 URI...

CVE-2019-11362

app/controllers/frontend/PostController.php in ROCBOSS V2.2.1 has SQL injection via the Post:doReward score paramter, as demonstrated by the /do/reward/3 URI...

CVE-2019-11362

app/controllers/frontend/PostController.php in ROCBOSS V2.2.1 has SQL injection via the Post:doReward score paramter, as demonstrated by the /do/reward/3 URI...

CVE-2019-11362

The CVE-2019-11362 entry describes an SQL injection in ROCBOSS V2.2.1, arising from unsafely handling the Post:doReward score parameter in app/controllers/frontend/PostController.php. The vulnerability is demonstrated via the /do/reward/3 URI. Connected documents confirm the same description acro...

PT-2019-12257

Name of the Vulnerable Software and Affected Versions ROCBOSS version 2.2.1 Description The issue concerns a SQL injection vulnerability. It is exploited via the score parameter in the Post:doReward function, as demonstrated by the "/do/reward/3" API endpoint. Recommendations For version 2.2.1,...

CVE-2019-11362: Improper Neutralization of Special Elements used in an SQL Command

app/controllers/frontend/PostController.php in ROCBOSS V2.2.1 has SQL injection via the Post:doReward score paramter, as demonstrated by the /do/reward/3 URI...

ROCBOSS 1.1 /module/user.module.class.php SQL注入漏洞

漏洞文件： \module\user.module.class.php 第11行代码： $userInfo=Common::getMemberInfo$this-db,isnumeric$userId ? 'uid' : 'nickname', $userId; 这一行代码进行了数据库查询，关键之处在$userId这个变量上 向上回溯到第10行代码： $userId=isset$GET'id' && trim$GET'id' != '' ? $GET'id' : $this-loginInfo'uid'; 当$GET‘id’被赋值的时候这个参数就能控制了，而且没有进行过滤。...