Rockoa SQL Injection (CVE-2020-18713)

An SQL injection vulnerability exists in Rockoa. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2020-18713

RockOA Rocks v1.8.7 is affected by a SQL injection in customerAction.php due to insufficient input filtering, enabling remote attackers to gain privileges. The CVE entry is supported by multiple connected records (NVD description, CNVD-2021-10487, CPAI-2020-3268, PRION/CVELIST entries) that descr...