Skip to content
OpenAdvisories

Product · Xinhu

RockOA

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2025-9602

    Xinhu RockOA index.php publicsaveAjax improper authorization

    A vulnerability was found in Xinhu RockOA up to 2.6.9. Impacted is the function publicsaveAjax of the file /index.php. Performing manipulation results in improper authorization. The attack is possible to be carried out remotely. The exploit has been made publ…

    Xinhu RockOA
  • Medium 6.3
    CVE-2024-7327

    Xinhu RockOA openmodhetongAction.php dataAction sql injection

    A vulnerability classified as critical was found in Xinhu RockOA 2.6.2. This vulnerability affects the function dataAction of the file /webmain/task/openapi/openmodhetongAction.php. The manipulation of the argument nickName leads to sql injection. The attack …

    Xinhu RockOA
  • Medium 4.3
    CVE-2023-5296

    Xinhu RockOA Password password recovery

    A vulnerability was found in Xinhu RockOA 1.1/2.3.2/15.X3amdi and classified as problematic. Affected by this issue is some unknown functionality of the file api.php?m=reimplat&a=index of the component Password Handler. The manipulation leads to weak password…

    Xinhu RockOA