CVE-2020-18713

SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in customerAction.php...

Sql injection

SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in customerAction.php...

CVE-2020-18713

RockOA Rocks v1.8.7 is affected by a SQL injection in customerAction.php due to insufficient input filtering, enabling remote attackers to gain privileges. The CVE entry is supported by multiple connected records (NVD description, CNVD-2021-10487, CPAI-2020-3268, PRION/CVELIST entries) that descr...