CNNVD-202512-1249 Information
Dec 09, 2025
cve
CNNVD ID
CNNVD-202512-1249
Related CVE
- CNNVD Published: 2025-12-09
Description (Chinese)
Xinhu RockOA是中国信呼（Xinhu）公司的一个办公OA系统。 Xinhu RockOA 2.7.0版本存在安全漏洞，该漏洞源于文件webmain/task/api/loginAction.php中函数setwxqyAction对参数shouji和userid的错误操作，可能导致SQL注入攻击。
Description (English)
Xinhu RockOA is an OA office system of Xinhu China. Xinhu RockOA version 2.7.0 contains a security loophole that stems from the error of the setwxqyaction function in the document Webmain/task/api/loginaction.php against the parameters shouji and userid, which may result in an injection attack by SQL.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
信呼
Published
2025-12-09
Last Modified
2026-02-24
References
https://github.com/rainrocka/xinhu/issues/14
Share on: