CVE-2026-84153: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in Xinhu Rainrock RockOA up to 2.3.2. The impacted element is the function toaddval of the file /index.php?m=index&a=publicsavevalue&ajaxbool=true. Executing a manipulation of the argument Value can lead to sql injection. The attack may be performed from remote. The...

EUVD-2020-23062

Malware in sbrugna...

CVE-2020-35388

rainrocka xinhu 2.1.9 allows remote attackers to obtain sensitive information via an index.php?a=gettotal request in which the ajaxbool value is manipulated to be true...

CVE-2020-35388

rainrocka xinhu 2.1.9 allows remote attackers to obtain sensitive information via an index.php?a=gettotal request in which the ajaxbool value is manipulated to be true...

Design/Logic Flaw

rainrocka xinhu 2.1.9 allows remote attackers to obtain sensitive information via an index.php?a=gettotal request in which the ajaxbool value is manipulated to be true...

CVE-2020-35388

CVE-2020-35388 affects Rainrocka Xinhu/Rockoa Xinhu 2.1.9. The vulnerability enables information disclosure by sending index.php?a=gettotal with ajaxbool set to true, allowing remote attackers to obtain sensitive information. Root cause involves manipulation of a request parameter to trigger unin...

PT-2020-17322

Name of the Vulnerable Software and Affected Versions rainrocka xinhu version 2.1.9 Description The issue allows remote attackers to obtain sensitive information via an "index.php?a=gettotal" request in which the ajaxbool value is manipulated to be true. This can lead to unauthorized access to...

CVE-2020-35388: Undefined Security Weakness

rainrocka xinhu 2.1.9 allows remote attackers to obtain sensitive information via an index.php?a=gettotal request in which the ajaxbool value is manipulated to be true...

Rockoa Xinhu 信息泄露漏洞

Rockoa Xinhu is a Php-based office OA system from China Xinhu Rockoa. Rockoa Xinhu 2.1.9 version of the information leakage vulnerability, the vulnerability stems from ajaxbool value is manipulated to true, the attacker can obtain sensitive information by exploiting the vulnerability...