Vulnerabilities > Rockoa > Xinhu > Medium

DATE CVE VULNERABILITY TITLE RISK
2024-10-23 CVE-2024-48213 Path Traversal vulnerability in Rockoa Xinhu 2.6.5
RockOA v2.6.5 is vulnerable to Directory Traversal in webmain/system/beifen/beifenAction.php.
network
low complexity
rockoa CWE-22
4.3
4.3
2024-06-17 CVE-2024-37624 Cross-site Scripting vulnerability in Rockoa Xinhu 2.6.3
Xinhu RockOA v2.6.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the /chajian/inputChajian.php.
network
low complexity
rockoa CWE-79
6.1
6.1