Description
An issue was discovered in file index.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers to gain sensitive information via phpinfo via the a parameter to the index.php.
Medium · 4.3
CVE-2025-63738
EUVD-2025-202293GHSA-w82f-vrwp-wv5p
An issue was discovered in file index.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers to gain sensitive information via phpinfo via t…
Published Dec 9, 2025 · Updated Dec 10, 2025 · Assigned by mitre