Rocboss

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-11362 CRITICAL POC Act Now

app/controllers/frontend/PostController.php in ROCBOSS V2.2.1 has SQL injection via the Post:doReward score paramter, as demonstrated by the /do/reward/3 URI. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SQLi PHP Rocboss

NVD GitHub

CVSS 3.0

9.8

EPSS

1.6%

CVE-2019-11362

EPSS 2% CVSS 9.8

CRITICAL POC Act Now

app/controllers/frontend/PostController.php in ROCBOSS V2.2.1 has SQL injection via the Post:doReward score paramter, as demonstrated by the /do/reward/3 URI. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SQLi PHP Rocboss

NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy