CVE-2019-11362

The CVE-2019-11362 entry describes an SQL injection in ROCBOSS V2.2.1, arising from unsafely handling the Post:doReward score parameter in app/controllers/frontend/PostController.php. The vulnerability is demonstrated via the /do/reward/3 URI. Connected documents confirm the same description acro...