Threats tagged 'ghsa-3cf5-29f4-vxgm'

1 threat

Threats tagged 'ghsa-3cf5-29f4-vxgm'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.9	EPSS 0.3%	CVE-2026-108571Rainrock RockOA · SQL Injection Medium6.9EPSS 0.3%2026-10-11CVE Database V5CVE-2026-108571 CVE-2026-108571 is a SQL injection vulnerability in Xinhu Rainrock RockOA affecting versions 2.7.0 through 2.7.6. The flaw exists in the function kqjcmdModel::returnchuli within the file webmain/task/openapi/openkqjAction.php. This vulnerability allows remote attackers to manipulate the ID argument to perform SQL injection. Public exploit code is available, and the vendor has not responded to the disclosure. EPSS 0.3%Vulnerability Xinhu #ghsa-3cf5-29f4-vxgm	CVE Database V5	2026-10-11

Showing 1–1 of 1 result