medium4.3
CVE-2025-63738
An issue was discovered in file index.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers to gain sensitive information via phpinfo via the a parameter to th…
Impact
An issue was discovered in file index.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers to gain sensitive information via phpinfo via the a parameter to the index.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rockoa | Rockoa | Version 2.7.0 |