Xinhu Rainrock RockOA Information Disclosure Vulnerability in index.php

A phpinfo() information disclosure vulnerability exists in Xinhu Rainrock RockOA version 2.7.0. This issue allows attackers to access sensitive server configuration details by invoking the phpinfo() function through specific URL parameters. The vulnerability arises because the phpinfoAction() method in index.php calls phpinfo() without proper access controls, exposing information such as the PHP version, file paths, configuration parameters, environment variables, and potentially database connection details.

Impact

Exploitation of this vulnerability leads to unauthorized disclosure of sensitive server information, including PHP and database connection details, which could be leveraged for further attacks.

Reproduction

To reproduce this vulnerability, send a request to index.php with the parameters a=phpinfo and m=index. Ensure that the request includes valid session cookies to access the target system.