Skip to content
OpenAdvisories

Vendor

Xinhu

10 known vulnerabilities.

4 results · Clear filters · Feed

  • Low 3.5

    Xinhu Rainrock RockOA API rockfun.php cross site scripting

    A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.1. Affected by this vulnerability is an unknown functionality of the file rockfun.php of the component API. This manipulation of the argument callback causes cross site scripting. The attack ma…

  • Low 3.5

    Xinhu Rainrock RockOA Cover Image rock_page_gong.php cross site scripting

    A security flaw has been discovered in Xinhu Rainrock RockOA up to 2.7.1. Affected is an unknown function of the file rock_page_gong.php of the component Cover Image Handler. The manipulation of the argument fengmian results in cross site scripting. The attac…

  • Low 3.5

    Xinhu RockOA tpl_upload.html okla cross site scripting

    A vulnerability was found in Xinhu RockOA 2.6.3 and classified as problematic. Affected by this issue is the function okla of the file /webmain/public/upload/tpl_upload.html. The manipulation of the argument callback leads to cross site scripting. The attack …

  • Low 3.7

    Xinhu RockOA start backup

    A vulnerability was found in Xinhu RockOA 2.3.2. It has been classified as problematic. This affects the function start of the file task.php?m=sys|runt&a=beifen. The manipulation leads to exposure of backup file to an unauthorized control sphere. It is possib…