DocSys vulnerabilities
10 known vulnerabilities in DocSys from RainyGao. 10 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.3 High severity
DocSys: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was detected in RainyGao DocSys up to 2.02.85. The impacted element is the function BaseController.createDBForMysql of the file BaseController.java of the component Database Management. The manipulation of the argument url results in sql inject
- 8.8 High severity
DocSys: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in RainyGao DocSys up to 2.02.37. This affects an unknown function of the file com/DocSystem/mapping/UserMapper.xml. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The expl
- 9.8 Critical severity
DocSys: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in RainyGao DocSys up to 2.02.36. The impacted element is an unknown function of the file src/com/DocSystem/mapping/ReposAuthMapper.xml. Executing a manipulation of the argument searchWord can lead to sql injection. It is possible to laun
- 8.8 High severity
DocSys: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in RainyGao DocSys up to 2.02.36. The affected element is an unknown function of the file src/com/DocSystem/mapping/GroupMemberMapper.xml. Performing a manipulation of the argument searchWord results in sql injection. It is possibl
- 9.1 Critical severity
DocSys: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was determined in RainyGao DocSys up to 2.02.36. Affected by this vulnerability is an unknown functionality of the file /Doc/deleteDoc.do. Executing manipulation of the argument path can lead to path traversal. The attack can be launched remote
- 9.8 Critical severity
DocSys: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was found in RainyGao DocSys up to 2.02.36. Affected is the function updateRealDoc of the file /Doc/uploadDoc.do of the component File Upload. Performing manipulation of the argument path results in path traversal. The attack can be initiated r
- 9.8 Critical severity
DocSys: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in RainyGao DocSys up to 2.02.36. This impacts the function getUserList of the file /Manage/getUserList.do. Such manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to
- 7.5 High severity
DocSys: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability has been found in RainyGao DocSys and classified as critical. Affected by this vulnerability is an unknown functionality of the component com.DocSystem.controller.UserController#getUserImg. The manipulation leads to path traversal: '../filedir'
- 8.8 High severity
DocSys: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in RainyGao DocSys. It has been declared as critical. This vulnerability affects the function getReposAllUsers of the file /DocSystem/Repos/getReposAllUsers.do. The manipulation of the argument searchWord/reposId leads to sql injectio
- 7.2 High severity
DocSys: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability classified as critical has been found in RainyGao DocSys 2.02.37. This affects an unknown part of the component ZIP File Decompression Handler. The manipulation leads to path traversal: '../filedir'. It is possible to initiate the attack remote