CVE-2020-20593

A cross-site request forgery CSRF in Rockoa v1.9.8 allows an authenticated attacker to arbitrarily add an administrator account...

CVE-2020-20593

Rockoa v1.9.8 is affected by a cross-site request forgery (CSRF) allowing an authenticated attacker to arbitrarily add an administrator account. This CVE-2020-20593 entry is supported by NVD metrics (CVSS v2 base 6.0; CVSS v3.1 base 8.0) and multiple references in connected records; exploitation ...

CVE-2020-20593

A cross-site request forgery CSRF in Rockoa v1.9.8 allows an authenticated attacker to arbitrarily add an administrator account...

CVE-2020-21147

RockOA V1.9.8 is affected by a cross-site scripting XSS vulnerability which allows remote attackers to send malicious code to the administrator and execute JavaScript code, because webmain/flow/input/modeemailmAction.php does not perform strict filtering...