Rockoa Xinhu
9 CVEs affecting Rockoa Xinhu. Latest disclosed: 2025-03-18. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-48930 | Critical | 9.8 | 2023-12-06 | xinhu xinhuoa 2.2.1 contains a File upload vulnerability. |
CVE-2022-45041 | High | 7.5 | 2022-12-19 | SQL Injection exits in xinhu < 2.5.0 |
CVE-2020-35388 | High | 7.5 | 2020-12-26 | rainrocka xinhu 2.1.9 allows remote attackers to obtain sensitive information via an index.php?a=gettotal request in which the ajaxbool value is manipulated to… |
CVE-2024-57151 | Medium | 6.8 | 2025-03-18 | SQL Injection vulnerability in rainrocka xinhu v.2.6.5 and before allows a remote attacker to execute arbitrary code via the inputAction.php file and the saveA… |
CVE-2024-7327 | Medium | 6.3 | 2024-07-31 | A vulnerability classified as critical was found in Xinhu RockOA 2.6.2. This vulnerability affects the function dataAction of the file /webmain/task/openapi/op… |
CVE-2024-37624 | Medium | 6.1 | 2024-06-17 | Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the /chajian/inputChajian.php. component. |
CVE-2024-37623 | Medium | 6.1 | 2024-06-17 | Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the /kaoqin/tpl_kaoqin_locationchange.html component. |
CVE-2024-37622 | Medium | 6.1 | 2024-06-17 | Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the num parameter at /flow/flow.php. |
CVE-2024-48213 | Medium | 4.3 | 2024-10-23 | RockOA v2.6.5 is vulnerable to Directory Traversal in webmain/system/beifen/beifenAction.php. |