| Package | Affected versions | Patched versions |
|---|---|---|
| rockoa | < 1.8.7 | 1.8.7 |
RockOA 1.8.7 allows remote attackers to obtain sensitive information because the webmain/webmainAction.php publictreestore method constructs a SQL WHERE clause unsafely by using the pidfields and idfields parameters, aka background SQL injection.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free