4 matches found
CVE-2020-18716
SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in wordAction.php...
CVE-2020-18716
SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in wordAction.php...
CVE-2020-18716: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in wordAction.php...
PT-2021-10223
Name of the Vulnerable Software and Affected Versions: Rockoa version 1.8.7 Description: The issue allows remote attackers to gain privileges due to loose filtering of parameters in wordAction.php. This can be exploited by sending crafted requests to the vulnerable endpoint, potentially allowing...