CVE-2026-108571: falha de média gravidade em Xinhu Rainrock RockOA
Xinhu Rainrock RockOA Openkqj Action openkqjAction.php returnchuli sql injection
Publicada em · Atualizada em
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.9epss 0.3%
probabilidade de exploração
0.3%top 77% das CVEs
exploração observada
nãonenhuma fonte reporta
A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.6. This impacts the function kqjcmdModel::returnchuli of the file webmain/task/openapi/openkqjAction.php of the component Openkqj Action. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
Xinhu · Rainrock RockOACVEs relacionadas — Xinhu Rainrock RockOA
No mesmo produto, das mais perigosas para as menos.
CVE-2026-84153MEDIUMXinhu Rainrock RockOA index.php toaddval sql injectionEPSS 0.3%CVE-2026-84109MEDIUMXinhu Rainrock RockOA webmainAction.php getOrder sql injectionEPSS 0.3%CVE-2026-0587MEDIUMXinhu Rainrock RockOA Cover Image rock_page_gong.php cross site scriptingEPSS 0.2%CVE-2026-0588MEDIUMXinhu Rainrock RockOA API rockfun.php cross site scriptingEPSS 0.2%