5 matches found
xinhu-v2.3.2
信呼 v2.3.2 Ambiente di debug per CVE-2023-1773 Aggiunti parametri di debug per il file webmain/task/api/reimplatAction.php, in modo che i dati prima e dopo la codifica vengano restituiti al frontend. Codice sorgente di 信呼 v2.3.2 rainrocka/xinhu at cb732f46f8f1e4614c8cfbef47a0bcbde6ecce34 Per il...
EUVD-2025-202292
An issue was discovered in function phpinisaveAction in file webmain/system/cogini/coginiAction.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers to authenticated users to modify PHP configuration files via the a parameter to the index.php endpoint...
CVE-2024-48213
RockOA v2.6.5 is vulnerable to Directory Traversal in webmain/system/beifen/beifenAction.php...
CVE-2024-48213
RockOA v2.6.5 is vulnerable to Directory Traversal in webmain/system/beifen/beifenAction.php...
CVE-2020-21147
RockOA V1.9.8 is affected by a cross-site scripting XSS vulnerability which allows remote attackers to send malicious code to the administrator and execute JavaScript code, because webmain/flow/input/modeemailmAction.php does not perform strict filtering...