xinhu-v2.3.2

Xinhu v2.3.2 Debugging environment for CVE-2023-1773 Added debug parameters for the webmain/task/api/reimplatAction.php file, allowing data before and after encoding to be returned to the front-end Xinhu v2.3.2 source code rainrocka/xinhu at cb732f46f8f1e4614c8cfbef47a0bcbde6ecce34 For the specif...

EUVD-2025-202292

An issue was discovered in function phpinisaveAction in file webmain/system/cogini/coginiAction.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers to authenticated users to modify PHP configuration files via the a parameter to the index.php endpoint...

CVE-2024-48213

RockOA v2.6.5 is vulnerable to Directory Traversal in webmain/system/beifen/beifenAction.php...

CVE-2024-48213

RockOA v2.6.5 is vulnerable to Directory Traversal in webmain/system/beifen/beifenAction.php...

CVE-2020-21147

RockOA V1.9.8 is affected by a cross-site scripting XSS vulnerability which allows remote attackers to send malicious code to the administrator and execute JavaScript code, because webmain/flow/input/modeemailmAction.php does not perform strict filtering...