CNNVD-202512-1251 Information
Dec 09, 2025
cve
CNNVD ID
CNNVD-202512-1251
Related CVE
- CNNVD Published: 2025-12-09
Description (Chinese)
Xinhu RockOA是中国信呼（Xinhu）公司的一个办公OA系统。 Xinhu RockOA 2.7.0版本存在安全漏洞，该漏洞源于文件webmain/system/cogini/coginiAction.php中函数phpinisaveAction对参数a的错误操作，可能导致PHP配置文件被修改。
Description (English)
Xinhu RockOA is an OA office system of Xinhu China. There is a security loophole in version 2.7.0 of Xinhu RockOA, which stems from the error of the phpinisaveaction against parameter a in the document webmain/system/cogini/coginiaction.php, which may result in the PHP configuration file being modified.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
信呼
Published
2025-12-09
Last Modified
2026-02-24
References
https://github.com/rainrocka/xinhu/issues/12
Share on: