CVE-2020-35388

rainrocka xinhu 2.1.9 allows remote attackers to obtain sensitive information via an index.php?a=gettotal request in which the ajaxbool value is manipulated to be true...

CVE-2020-35388

CVE-2020-35388 affects Rainrocka Xinhu/Rockoa Xinhu 2.1.9. The vulnerability enables information disclosure by sending index.php?a=gettotal with ajaxbool set to true, allowing remote attackers to obtain sensitive information. Root cause involves manipulation of a request parameter to trigger unin...

Rockoa Xinhu 信息泄露漏洞

Rockoa Xinhu is a Php-based office OA system from China Xinhu Rockoa. Rockoa Xinhu 2.1.9 version of the information leakage vulnerability, the vulnerability stems from ajaxbool value is manipulated to true, the attacker can obtain sensitive information by exploiting the vulnerability...