Code injection

A vulnerability was found in Rockoa 2.3.2. It has been declared as critical. This vulnerability affects unknown code of the file webmainConfig.php of the component Configuration File Handler. The manipulation leads to code injection. The attack can be initiated remotely. The exploit has been...

CVE-2023-1773

RockOA Rockoa 2.3.2 is affected by a code injection vulnerability in the Configuration File Handler, specifically the webmainConfig.php file. The underlying issue is unauthorized code execution triggered via the webmainConfig.php component, with remote exploitation possible and public disclosure ...

CVE-2023-1773 Rockoa Configuration File webmainConfig.php code injection

A vulnerability was found in Rockoa 2.3.2. It has been declared as critical. This vulnerability affects unknown code of the file webmainConfig.php of the component Configuration File Handler. The manipulation leads to code injection. The attack can be initiated remotely. The exploit has been...

CVE-2023-1773 Rockoa Configuration File webmainConfig.php code injection

A vulnerability was found in Rockoa 2.3.2. It has been declared as critical. This vulnerability affects unknown code of the file webmainConfig.php of the component Configuration File Handler. The manipulation leads to code injection. The attack can be initiated remotely. The exploit has been...

PT-2023-17233 · Rockoa · Rockoa

Name of the Vulnerable Software and Affected Versions: Rockoa version 2.3.2 Description: A critical issue has been found in the Configuration File Handler component, specifically affecting the webmainConfig.php file. This issue leads to code injection and can be initiated remotely. The exploit fo...

RockOA 代码注入漏洞

RockOA Xinhuo is an open source office OA system. RockOA 2.3.2 version of a security vulnerability , the vulnerability stems from the component Configuration File Handler file webmainConfig.php there is unknown code , resulting in code injection...

CVE-2023-1501

A vulnerability, which was classified as critical, was found in RockOA 2.3.2. This affects the function runAction of the file acloudCosAction.php.SQL. The manipulation of the argument fileid leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclos...

CVE-2023-1501

A vulnerability, which was classified as critical, was found in RockOA 2.3.2. This affects the function runAction of the file acloudCosAction.php.SQL. The manipulation of the argument fileid leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclos...

Design/Logic Flaw

A vulnerability, which was classified as critical, was found in RockOA 2.3.2. This affects the function runAction of the file acloudCosAction.php.SQL. The manipulation of the argument fileid leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclos...

CVE-2023-1501

Impact summary (CVE-2023-1501) RockOA 2.3.2 contains a vulnerability in the runAction function of the file acloudCosAction.php.SQL. Manipulating the fileid argument enables unrestricted file upload, with remote-initiated exploitation reported. Multiple sources reference this issue, including Red ...

CVE-2023-1501 RockOA acloudCosAction.php.SQL runAction unrestricted upload

A vulnerability, which was classified as critical, was found in RockOA 2.3.2. This affects the function runAction of the file acloudCosAction.php.SQL. The manipulation of the argument fileid leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclos...

PT-2023-17037 · Rockoa · Rockoa

Name of the Vulnerable Software and Affected Versions: RockOA version 2.3.2 Description: A critical issue was found in the runAction function of the file acloudCosAction.php.SQL. The manipulation of the fileid argument leads to unrestricted upload. It is possible to initiate the attack remotely...

RockOA 代码问题漏洞

RockOA Xinhuo is an open source office OA system . RockOA 2.3.2 version of the code problem vulnerability , the vulnerability stems from the file acloudCosAction.php.SQL function runAction has problems with the operation of the parameter fileid will lead to unrestricted uploads...

Rockoa Cross-Site Request Forgery Vulnerability

RockOA Letter Call is an open source office OA system. v1.9.8 of Rockoa has a security vulnerability that can be exploited by attackers to arbitrarily add administrator accounts...

CVE-2020-20593

A cross-site request forgery CSRF in Rockoa v1.9.8 allows an authenticated attacker to arbitrarily add an administrator account...

CVE-2020-20593

A cross-site request forgery CSRF in Rockoa v1.9.8 allows an authenticated attacker to arbitrarily add an administrator account...

CVE-2020-20593

Rockoa v1.9.8 is affected by a cross-site request forgery (CSRF) allowing an authenticated attacker to arbitrarily add an administrator account. This CVE-2020-20593 entry is supported by NVD metrics (CVSS v2 base 6.0; CVSS v3.1 base 8.0) and multiple references in connected records; exploitation ...

CVE-2020-20593

A cross-site request forgery CSRF in Rockoa v1.9.8 allows an authenticated attacker to arbitrarily add an administrator account...

Rockoa 跨站请求伪造漏洞

RockOA Letter Call is an open source office OA system. v1.9.8 of Rockoa has a security vulnerability that can be exploited by attackers to arbitrarily add administrator accounts...

Rockoa SQL Injection (CVE-2020-18714)

An SQL injection vulnerability exists in Rockoa. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...