CVE-2025-63738

An issue was discovered in file index.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers to gain sensitive information via phpinfo via the a parameter to the index.php...

CVE-2025-63737

Xinhu Rainrock RockOA 2.7.0 is affected by a Cross-site Scripting (XSS) vulnerability in the urltestAction function of cliAction.php. The issue allows remote attackers to inject arbitrary web scripts or HTML via the m parameter to the /task.php endpoint. The attack surface is the RockOA 2.7.0 dep...

EUVD-2020-10633

Malware in sbrugna...

CVE-2024-37622

Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting XSS vulnerability via the num parameter at /flow/flow.php...

CVE-2024-48213

RockOA v2.6.5 is vulnerable to Directory Traversal in webmain/system/beifen/beifenAction.php...

CVE-2024-37622

Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting XSS vulnerability via the num parameter at /flow/flow.php...

CVE-2020-18714

SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in wordModel.php's getdata function...