Xinhu

Products

ProductCVEsExploitedLatest
Rainrock RockOA5–Oct 11, 2026
RockOA5–Aug 29, 2025

Exploited and recent CVEs

  • CVE-2026-108571 High 7.3 Xinhu Rainrock RockOA Openkqj Action openkqjAction.php returnchuli sql injection 0.3%
  • CVE-2026-84153 Medium 6.3 Xinhu Rainrock RockOA index.php toaddval sql injection 0.3%
  • CVE-2026-84109 Medium 6.3 Xinhu Rainrock RockOA webmainAction.php getOrder sql injection 0.3%
  • CVE-2026-0588 Low 3.5 Xinhu Rainrock RockOA API rockfun.php cross site scripting 0.2%
  • CVE-2026-0587 Low 3.5 Xinhu Rainrock RockOA Cover Image rock_page_gong.php cross site scripting 0.2%
  • CVE-2025-9602 Medium 6.3 Xinhu RockOA index.php publicsaveAjax improper authorization 0.3%
  • CVE-2024-7327 Medium 6.3 Xinhu RockOA openmodhetongAction.php dataAction sql injection 0.5%
  • CVE-2024-6939 Low 3.5 Xinhu RockOA tpl_upload.html okla cross site scripting 0.5%
  • CVE-2023-5297 Low 3.7 Xinhu RockOA start backup 0.8%
  • CVE-2023-5296 Medium 4.3 Xinhu RockOA Password password recovery 0.5%