xinhuoa
by Xinhu
CVEs (3)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-48930 | Cri | 0.64 | 9.8 | 0.01 | Dec 6, 2023 | xinhu xinhuoa 2.2.1 contains a File upload vulnerability. | ||
| CVE-2022-45041 | Hig | 0.49 | 7.5 | 0.01 | Dec 19, 2022 | SQL Injection exits in xinhu < 2.5.0 | ||
| CVE-2025-9602 | Med | 0.41 | 6.3 | 0.00 | Aug 29, 2025 | A vulnerability was found in Xinhu RockOA up to 2.6.9. Impacted is the function publicsaveAjax of the file /index.php. Performing manipulation results in improper authorization. The attack is possible to be carried out remotely. The exploit has been made public and could be used. |
- risk 0.64cvss 9.8epss 0.01
xinhu xinhuoa 2.2.1 contains a File upload vulnerability.
- risk 0.49cvss 7.5epss 0.01
SQL Injection exits in xinhu < 2.5.0
- risk 0.41cvss 6.3epss 0.00
A vulnerability was found in Xinhu RockOA up to 2.6.9. Impacted is the function publicsaveAjax of the file /index.php. Performing manipulation results in improper authorization. The attack is possible to be carried out remotely. The exploit has been made public and could be used.