CVE-2020-18714

Publication date

2021-02-04 23:06:51

Family

mitre

State

PUBLISHED

Description

SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in wordModel.phps getdata function.