EUVD-2024-54095

Malicious code in bioql PyPI...

CVE-2020-35388

rainrocka xinhu 2.1.9 allows remote attackers to obtain sensitive information via an index.php?a=gettotal request in which the ajaxbool value is manipulated to be true...

CVE-2024-57151

SQL Injection vulnerability in rainrocka xinhu v.2.6.5 and before allows a remote attacker to execute arbitrary code via the inputAction.php file and the saveAjax function...

CVE-2024-57151

SQL Injection vulnerability in rainrocka xinhu v.2.6.5 and before allows a remote attacker to execute arbitrary code via the inputAction.php file and the saveAjax function...

CVE-2024-57151

SQL Injection vulnerability in rainrocka xinhu v.2.6.5 and before allows a remote attacker to execute arbitrary code via the inputAction.php file and the saveAjax function...

CVE-2024-57151

SQL Injection vulnerability in rainrocka xinhu v.2.6.5 and before allows a remote attacker to execute arbitrary code via the inputAction.php file and the saveAjax function...

CVE-2024-57151

SQL Injection vulnerability in rainrocka xinhu v.2.6.5 and before allows a remote attacker to execute arbitrary code via the inputAction.php file and the saveAjax function...

PT-2025-11648

Name of the Vulnerable Software and Affected Versions rainrocka xinhu versions 2.6.5 and earlier Description The issue allows a remote attacker to execute arbitrary code via the inputAction.php file and the saveAjax function. This can be exploited by providing malicious input to the vulnerable...

CVE-2024-57151

The rainrocka xinhu office OA system (versions 2.6.5 and earlier ) is vulnerable to an SQL Injection flaw within the inputAction.php file and the saveAjax function. A remote attacker can provide malicious input to vulnerable parameters to achieve arbitrary code execution and potentially gain unau...

CVE-2024-57151

SQL Injection vulnerability in rainrocka xinhu v.2.6.5 and before allows a remote attacker to execute arbitrary code via the inputAction.php file and the saveAjax function...

CVE-2024-57151: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in rainrocka xinhu v.2.6.5 and before allows a remote attacker to execute arbitrary code via the inputAction.php file and the saveAjax function...

Design/Logic Flaw

rainrocka xinhu 2.1.9 allows remote attackers to obtain sensitive information via an index.php?a=gettotal request in which the ajaxbool value is manipulated to be true...

CVE-2020-35388

rainrocka xinhu 2.1.9 allows remote attackers to obtain sensitive information via an index.php?a=gettotal request in which the ajaxbool value is manipulated to be true...

CVE-2020-35388

CVE-2020-35388 affects Rainrocka Xinhu/Rockoa Xinhu 2.1.9. The vulnerability enables information disclosure by sending index.php?a=gettotal with ajaxbool set to true, allowing remote attackers to obtain sensitive information. Root cause involves manipulation of a request parameter to trigger unin...

PT-2020-17322

Name of the Vulnerable Software and Affected Versions rainrocka xinhu version 2.1.9 Description The issue allows remote attackers to obtain sensitive information via an "index.php?a=gettotal" request in which the ajaxbool value is manipulated to be true. This can lead to unauthorized access to...

CVE-2020-35388: Undefined Security Weakness

rainrocka xinhu 2.1.9 allows remote attackers to obtain sensitive information via an index.php?a=gettotal request in which the ajaxbool value is manipulated to be true...