LOW🇬🇧 English

CVE-2023-5297

CVSS 3.7v3.1pub. 2023-09-29upd. 2024-11-21

A vulnerability was found in Xinhu RockOA 2.3.2. It has been classified as problematic. This affects the function start of the file task.php?m=sys|runt&a=beifen. The manipulation leads to exposure of backup file to an unauthorized control sphere. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-240927.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

  • Rockoa

    APP
    Rockoa
    2.3.2
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2025-63742CRITICAL9.8PL ✓ten sam produkt

SQL Injection w Xinhu RockOA – wyciek danych administratora

CVE-2023-49363CRITICAL9.8PL ✓ten sam produkt

SQL Injection w Rockoa — metoda indexAction w reimpAction.php

CVE-2020-18714CRITICAL9.8ten sam produkt

SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters...

CVE-2020-18713CRITICAL9.8ten sam produkt

SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters...

CVE-2020-18716CRITICAL9.8ten sam produkt

SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters...