Rockoa
Monthly
A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.1. Affected by this vulnerability is an unknown functionality of the file rockfun.php of the component API. [CVSS 3.5 LOW]
A security flaw has been discovered in Xinhu Rainrock RockOA up to 2.7.1. Affected is an unknown function of the file rock_page_gong.php of the component Cover Image Handler. [CVSS 3.5 LOW]
Unauthenticated SQL injection in Xinhu RockOA 2.7.0 allows remote attackers to extract sensitive information, including administrator credentials and database structure, via the shouji and userid parameters in the loginAction.php API endpoint. Publicly available exploit code exists, and the assessed impact is high confidentiality with limited integrity (CVSS 3.1 base score 8.2, C:H/I:L/A:N). No vendor patch is identified at time of analysis.
SQL injection in Xinhu Rainrock RockOA 2.7.0 lets unauthenticated network-reachable attackers extract sensitive database contents-including administrator accounts and password hashes-through the actstr parameter in inputAction.php's getselectdataAjax function. Publicly available exploit code exists, and the assessed impact is primarily high confidentiality loss; no CISA KEV entry was provided, so active exploitation is not confirmed.
Authenticated users in Xinhu RockOA 2.7.0 can alter PHP configuration files through the phpinisaveAction handler in webmain/system/cogini/coginiAction.php by supplying the 'a' parameter to index.php. The flaw (CWE-284 improper access control) carries a CVSS 3.1 score of 4.3 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N), meaning it is limited to integrity impact and requires a valid account; publicly available exploit code exists, but it is not in CISA KEV. This is a low-priority issue because exploitation is gated on prior authentication and is specific to RockOA 2.7.0.
Information disclosure in Xinhu Rainrock RockOA 2.7.0 allows a low-privilege authenticated attacker to retrieve phpinfo() output by supplying a crafted value in the 'a' parameter to index.php, exposing PHP configuration and server details. Publicly available exploit code exists, but the requirement for a valid low-privilege session and the confidentiality-only impact keep the EPSS score low at 0.26% (17th percentile), making this a low-to-moderate priority issue despite the exploit availability signal.
Reflected cross-site scripting in Xinhu Rainrock RockOA 2.7.0 allows remote attackers to execute arbitrary script in a victim's browser by luring them to a crafted task.php URL carrying a malicious payload in the m parameter, which the urltestAction function in cliAction.php reflects without adequate sanitization. No attacker authentication is required (PR:N), but exploitation depends on victim interaction (UI:R) - the victim must click the attacker-supplied link - and the impact is confined to the client-side context of that user's session rather than the server itself. Publicly available exploit code exists via the linked GitHub issue, and the CVSS 3.1 base score is 6.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N); no confirmed active exploitation (CISA KEV) was identified at time of analysis.
A vulnerability was found in Xinhu RockOA up to 2.6.9. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
SQL Injection vulnerability in rainrocka xinhu v.2.6.5 and before allows a remote attacker to execute arbitrary code via the inputAction.php file and the saveAjax function. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
RockOA v2.6.5 is vulnerable to Directory Traversal in webmain/system/beifen/beifenAction.php. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A vulnerability classified as critical was found in Xinhu RockOA 2.6.2. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in Xinhu RockOA 2.6.3 and classified as problematic. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the /chajian/inputChajian.php. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the /kaoqin/tpl_kaoqin_locationchange.html component. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the num parameter at /flow/flow.php. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Rockoa <2.3.3 is vulnerable to SQL Injection. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
xinhu xinhuoa 2.2.1 contains a File upload vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in Xinhu RockOA 2.3.2. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in Xinhu RockOA 1.1/2.3.2/15.X3amdi and classified as problematic. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in Rockoa 2.3.2. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
A vulnerability, which was classified as critical, was found in RockOA 2.3.2. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
SQL Injection exits in xinhu < 2.5.0. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
rainrocka xinhu 2.1.9 allows remote attackers to obtain sensitive information via an index.php?a=gettotal request in which the ajaxbool value is manipulated to be true. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
RockOA 1.8.7 allows remote attackers to obtain sensitive information because the webmain/webmainAction.php publictreestore method constructs a SQL WHERE clause unsafely by using the pidfields and. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.1. Affected by this vulnerability is an unknown functionality of the file rockfun.php of the component API. [CVSS 3.5 LOW]
A security flaw has been discovered in Xinhu Rainrock RockOA up to 2.7.1. Affected is an unknown function of the file rock_page_gong.php of the component Cover Image Handler. [CVSS 3.5 LOW]
Unauthenticated SQL injection in Xinhu RockOA 2.7.0 allows remote attackers to extract sensitive information, including administrator credentials and database structure, via the shouji and userid parameters in the loginAction.php API endpoint. Publicly available exploit code exists, and the assessed impact is high confidentiality with limited integrity (CVSS 3.1 base score 8.2, C:H/I:L/A:N). No vendor patch is identified at time of analysis.
SQL injection in Xinhu Rainrock RockOA 2.7.0 lets unauthenticated network-reachable attackers extract sensitive database contents-including administrator accounts and password hashes-through the actstr parameter in inputAction.php's getselectdataAjax function. Publicly available exploit code exists, and the assessed impact is primarily high confidentiality loss; no CISA KEV entry was provided, so active exploitation is not confirmed.
Authenticated users in Xinhu RockOA 2.7.0 can alter PHP configuration files through the phpinisaveAction handler in webmain/system/cogini/coginiAction.php by supplying the 'a' parameter to index.php. The flaw (CWE-284 improper access control) carries a CVSS 3.1 score of 4.3 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N), meaning it is limited to integrity impact and requires a valid account; publicly available exploit code exists, but it is not in CISA KEV. This is a low-priority issue because exploitation is gated on prior authentication and is specific to RockOA 2.7.0.
Information disclosure in Xinhu Rainrock RockOA 2.7.0 allows a low-privilege authenticated attacker to retrieve phpinfo() output by supplying a crafted value in the 'a' parameter to index.php, exposing PHP configuration and server details. Publicly available exploit code exists, but the requirement for a valid low-privilege session and the confidentiality-only impact keep the EPSS score low at 0.26% (17th percentile), making this a low-to-moderate priority issue despite the exploit availability signal.
Reflected cross-site scripting in Xinhu Rainrock RockOA 2.7.0 allows remote attackers to execute arbitrary script in a victim's browser by luring them to a crafted task.php URL carrying a malicious payload in the m parameter, which the urltestAction function in cliAction.php reflects without adequate sanitization. No attacker authentication is required (PR:N), but exploitation depends on victim interaction (UI:R) - the victim must click the attacker-supplied link - and the impact is confined to the client-side context of that user's session rather than the server itself. Publicly available exploit code exists via the linked GitHub issue, and the CVSS 3.1 base score is 6.1 (AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N); no confirmed active exploitation (CISA KEV) was identified at time of analysis.
A vulnerability was found in Xinhu RockOA up to 2.6.9. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
SQL Injection vulnerability in rainrocka xinhu v.2.6.5 and before allows a remote attacker to execute arbitrary code via the inputAction.php file and the saveAjax function. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
RockOA v2.6.5 is vulnerable to Directory Traversal in webmain/system/beifen/beifenAction.php. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A vulnerability classified as critical was found in Xinhu RockOA 2.6.2. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in Xinhu RockOA 2.6.3 and classified as problematic. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the /chajian/inputChajian.php. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the /kaoqin/tpl_kaoqin_locationchange.html component. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the num parameter at /flow/flow.php. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Rockoa <2.3.3 is vulnerable to SQL Injection. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
xinhu xinhuoa 2.2.1 contains a File upload vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in Xinhu RockOA 2.3.2. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in Xinhu RockOA 1.1/2.3.2/15.X3amdi and classified as problematic. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in Rockoa 2.3.2. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
A vulnerability, which was classified as critical, was found in RockOA 2.3.2. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
SQL Injection exits in xinhu < 2.5.0. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
rainrocka xinhu 2.1.9 allows remote attackers to obtain sensitive information via an index.php?a=gettotal request in which the ajaxbool value is manipulated to be true. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
RockOA 1.8.7 allows remote attackers to obtain sensitive information because the webmain/webmainAction.php publictreestore method constructs a SQL WHERE clause unsafely by using the pidfields and. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.