Security Advisory

CVE-2025-63742

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-12-09 00:00:00

Last updated 2025-12-11 19:16:58

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

SQL Injection vulnerability in function setwxqyAction in file webmain/task/api/loginAction.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers gain sensitive information, including administrator accounts, password hashes, database structure, and other critical data via the shouji and userid parameters.

← Browse all CVEs View on cve.org ↗