11 matches found
EUVD-2020-10630
Malware in sbrugna...
CVE-2020-18714
SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in wordModel.php's getdata function...
CVE-2020-18716
SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in wordAction.php...
Sql injection
SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in wordModel.php's getdata function...
Sql injection
SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in customerAction.php...
Sql injection
SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in wordAction.php...
CVE-2020-18716
SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in wordAction.php...
CVE-2020-18716
RockOA (Rockoa) v1.8.7 is affected by CVE-2020-18716 due to insufficient filtering of input in wordAction.php , enabling SQL injection from remote attackers. The vulnerability stems from loose parameter filtering, potentially allowing SQL statements to be executed and privileges accessed or escal...
CVE-2020-18714
SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in wordModel.php's getdata function...
CVE-2020-18714
CVE-2020-18714 affects RockOA Rockoa v1.8.7, where wordModel.php:getdata processes user input without proper filtering, enabling SQL injection. This leads to remote execution of arbitrary SQL commands and potential privilege escalation as described across multiple advisories (CP AI, CNVD, NVD, CV...