CNNVD-202601-892 Information
Jan 05, 2026
cve
CNNVD ID
CNNVD-202601-892
Related CVE
- CNNVD Published: 2026-01-05
Description (Chinese)
Xinhu Rainrock RockOA是中国信呼（Xinhu）公司的一款办公自动化系统。 Xinhu Rainrock RockOA 2.7.1及之前版本存在安全漏洞，该漏洞源于对文件rockfun.php中参数callback的错误操作，可能导致跨站脚本攻击。
Description (English)
Xinhu Rainrock RockOA is an office automation system for Xinhu China. Xinhu Rainrock RockOA 2.7.1 and previous versions had a security loophole, which stemmed from a wrong operation to callback, the parameter in the Rockfun.php document, which could result in a cross-site script attack.
Hazard Level
Critical
Vulnerability Type
其他
Affected Vendor
信呼
Published
2026-01-05
Last Modified
2026-02-24
References
https://vuldb.com/?ctiid.339494 https://vuldb.com/?submit.725397 https://vuldb.com/?id.339494 https://access.redhat.com/security/cve/cve-2026-0588
Share on: