Rockoa SQL Injection (CVE-2020-18714)

An SQL injection vulnerability exists in Rockoa. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2020-18714

CVE-2020-18714 affects RockOA Rockoa v1.8.7, where wordModel.php:getdata processes user input without proper filtering, enabling SQL injection. This leads to remote execution of arbitrary SQL commands and potential privilege escalation as described across multiple advisories (CP AI, CNVD, NVD, CV...