CVE-2026-84153 Xinhu Rainrock RockOA index.php toaddval sql injection

A vulnerability was determined in Xinhu Rainrock RockOA up to 2.3.2. The impacted element is the function toaddval of the file /index.php?m=index&a=publicsavevalue&ajaxbool=true. Executing a manipulation of the argument Value can lead to sql injection. The attack may be performed from remote. The...

EUVD-2026-69286

A vulnerability was determined in Xinhu Rainrock RockOA up to 2.3.2. The impacted element is the function toaddval of the file /index.php?m=index&a=publicsavevalue&ajaxbool=true. Executing a manipulation of the argument Value can lead to sql injection. The attack may be performed from remote. The...

CVE-2026-84153

Xinhu Rainrock RockOA versions up to 2.3.2 contain a SQL injection vulnerability in the toaddval function of /index.php?m=index&a=publicsavevalue&ajaxbool=true. Manipulating the Value parameter allows a remote attacker with low privileges to affect confidentiality, integrity, and availability (CV...

PT-2026-84298

A vulnerability was determined in Xinhu Rainrock RockOA up to 2.3.2. The impacted element is the function toaddval of the file /index.php?m=index&a=publicsavevalue&ajaxbool=true. Executing a manipulation of the argument Value can lead to sql injection. The attack may be performed from remote. The...