Sql injection

SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in wordModel.php's getdata function...

CVE-2020-18714: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in wordModel.php's getdata function...

PT-2021-10221

Name of the Vulnerable Software and Affected Versions: Rockoa version 1.8.7 Description: The issue allows remote attackers to gain privileges due to loose filtering of parameters in the getdata function of wordModel.php. Recommendations: For Rockoa version 1.8.7, consider restricting access to th...