critical9.8
CVE-2020-18714
SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in wordModel.php's getdata function.
Impact
SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in wordModel.php's getdata function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rockoa | Rockoa | Version 1.8.7 |