CVE-2026-84109

A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.6. Affected by this issue is the function getOrder of the file webmain/webmainAction.php. Executing a manipulation of the argument highorder can lead to sql injection. The attack can be launched remotely. The exploit has been made...

CVE-2026-84109

A SQL injection vulnerability exists in Xinhu Rainrock RockOA versions up to 2.7.6 . The flaw resides in the getOrder function of webmain/webmainAction.php , where manipulation of the highorder argument can be exploited remotely with low privileges and no user interaction. The CVSS 3.1 base score...

EUVD-2026-69146

A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.6. Affected by this issue is the function getOrder of the file webmain/webmainAction.php. Executing a manipulation of the argument highorder can lead to sql injection. The attack can be launched remotely. The exploit has been made...