CVE-2020-18713

SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in customerAction.php...

Sql injection

SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in customerAction.php...

CVE-2020-18713

RockOA Rocks v1.8.7 is affected by a SQL injection in customerAction.php due to insufficient input filtering, enabling remote attackers to gain privileges. The CVE entry is supported by multiple connected records (NVD description, CNVD-2021-10487, CPAI-2020-3268, PRION/CVELIST entries) that descr...

CVE-2020-18713: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in customerAction.php...

PT-2021-10220

Name of the Vulnerable Software and Affected Versions: Rockoa version 1.8.7 Description: The issue allows remote attackers to gain privileges due to loose filtering of parameters in customerAction.php. This can be exploited through SQL injection. Recommendations: For Rockoa version 1.8.7, conside...