Approved changes feed: RSS · Atom

cpe:2.3:a:rockoa:xinhu:2.1.9:*:*:*:*:*:*:*

part: a version: 2.1.9 update: *

VendorRockoa (7969e6c1-fcd5-5f24-ba0f-986615550020)
ProductXinhu (e8ea23ab-d645-5ae0-a728-ca9e2f0decba)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/rainrocka/xinhu purl2cpe 2026-06-01 10:13:17.041726

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-35388 vulnerable 2026-06-08 05:25:01.061829 Details available
rainrocka xinhu 2.1.9 allows remote attackers to obtain sensitive information via an index.php?a=gettotal request in which the ajaxbool value is manipulated to be true.
Published: 2020-12-26T02:38:32.000Z
Updated: 2024-08-04T17:02:08.108Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.