Rockoa vulnerabilities

Products

• Rockoa 19
• Xinhu 9

Newest

• rockoa, xinhu rainrock rockoa +1 more Xinhu Rainrock RockOA API rockfun.php cross site scripting CVE-2026-0588 5.1 MediumJanuary 5, 2026
• rockoa, xinhu rainrock rockoa +1 more Xinhu Rainrock RockOA Cover Image rock_page_gong.php cross site scripting CVE-2026-0587 5.1 MediumJanuary 5, 2026
• rockoa SQL Injection vulnerability in function setwxqyAction in file webmain/task/api/loginAction.php in... CVE-2025-63742 9.8 CriticalDecember 9, 2025
• rockoa SQL Injection vulnerability in function getselectdataAjax in file inputAction.php in Xinhu... CVE-2025-63740 4.3 MediumDecember 9, 2025
• rockoa An issue was discovered in function phpinisaveAction in file webmain/system/cogini/coginiAction... CVE-2025-63739 4.3 MediumDecember 9, 2025
• rockoa An issue was discovered in file index.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers to... CVE-2025-63738 4.3 MediumDecember 9, 2025
• rockoa Cross-site scripting (XSS) vulnerability in function urltestAction in file cliAction.php in Xinhu... CVE-2025-63737 6.1 MediumDecember 9, 2025
• rockoa Xinhu RockOA index.php publicsaveAjax improper authorization CVE-2025-9602 5.3 MediumAugust 29, 2025
• rockoa xinhu SQL Injection vulnerability in rainrocka xinhu v.2.6.5 and before allows a remote attacker to... CVE-2024-57151 6.8 MediumMarch 18, 2025
• rockoa xinhu RockOA v2.6.5 is vulnerable to Directory Traversal in webmain/system/beifen/beifenAction.php. CVE-2024-48213 4.3 MediumOctober 23, 2024
• rockoa xinhu, xinhu rockoa +1 more Xinhu RockOA openmodhetongAction.php dataAction sql injection CVE-2024-7327 5.3 MediumJuly 31, 2024
• rockoa xinhu Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting (XSS)... CVE-2024-37624 6.1 MediumJune 17, 2024
• rockoa xinhu Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting (XSS)... CVE-2024-37623 6.1 MediumJune 17, 2024
• rockoa xinhu, xinhu rockoa +1 more Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting (XSS)... CVE-2024-37622 6.1 MediumJune 17, 2024
• rockoa Rockoa <2.3.3 is vulnerable to SQL Injection. The problem exists in the indexAction method in... CVE-2023-49363 9.8 CriticalDecember 13, 2023
• rockoa xinhu xinhu xinhuoa 2.2.1 contains a File upload vulnerability. CVE-2023-48930 9.8 CriticalDecember 6, 2023
• rockoa Xinhu RockOA start backup CVE-2023-5297 3.7 LowSeptember 29, 2023
• rockoa Xinhu RockOA Password password recovery CVE-2023-5296 4.3 MediumSeptember 29, 2023
• rockoa Rockoa Configuration File webmainConfig.php code injection CVE-2023-1773 Public exploit 6.3 MediumMarch 31, 2023
• rockoa RockOA acloudCosAction.php.SQL runAction unrestricted upload CVE-2023-1501 6.3 MediumMarch 19, 2023
• rockoa xinhu SQL Injection exits in xinhu < 2.5.0 CVE-2022-45041 7.5 HighDecember 19, 2022
• rockoa A cross-site request forgery (CSRF) in Rockoa v1.9.8 allows an authenticated attacker to... CVE-2020-20593 8.0 HighDecember 22, 2021
• rockoa SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering... CVE-2020-18716 9.8 CriticalFebruary 4, 2021
• rockoa SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering... CVE-2020-18714 9.8 CriticalFebruary 4, 2021
• rockoa SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering... CVE-2020-18713 9.8 CriticalFebruary 4, 2021
• rockoa RockOA V1.9.8 is affected by a cross-site scripting (XSS) vulnerability which allows remote... CVE-2020-21147 4.8 MediumJanuary 21, 2021
• rockoa xinhu rainrocka xinhu 2.1.9 allows remote attackers to obtain sensitive information via an index.php?a... CVE-2020-35388 7.5 HighDecember 26, 2020
• rockoa RockOA 1.8.7 allows remote attackers to obtain sensitive information because the webmain... CVE-2019-9846 8.8 HighMarch 16, 2019