Vulnerabilities

TI-2026-67540 CVE-2026-105158 · GHSA-29mr-m6g4-8wq4

RainyGao DocSys Database Management BaseController.java BaseController.createDBForMysql sql injection

HIGH 70

A vulnerability was detected in RainyGao DocSys up to 2.02.85.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00263 Published 2026-10-04 No fix listed CWE-74

TI-2026-67539 CVE-2026-105157 · GHSA-6wm8-mcq6-fgm4

RainyGao DocSys Document Controller doGetTmpFile.do DocController.doGetTmp path traversal

MEDIUM 57

A security vulnerability has been detected in RainyGao DocSys up to 2.02.85.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00319 Published 2026-10-04 No fix listed CWE-22

TI-2025-14133 CVE-2025-15494 · GHSA-6c7p-3rhg-7wgj

RainyGao DocSys UserMapper.xml sql injection

MEDIUM 57

A vulnerability has been found in RainyGao DocSys up to 2.02.37.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0042 Published 2026-01-09 No fix listed CWE-74

TI-2025-14132 CVE-2025-15493 · GHSA-rg37-qjm5-vw5p

RainyGao DocSys ReposAuthMapper.xml sql injection

MEDIUM 57

A flaw has been found in RainyGao DocSys up to 2.02.36.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00439 Published 2026-01-09 No fix listed CWE-74

TI-2025-14131 CVE-2025-15492 · GHSA-xg8w-4mgh-rwxq

RainyGao DocSys GroupMemberMapper.xml sql injection

MEDIUM 57

A vulnerability was detected in RainyGao DocSys up to 2.02.36.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.0042 Published 2026-01-09 No fix listed CWE-74

TI-2025-10661 CVE-2025-11631 · GHSA-jwwr-9265-56jg

RainyGao DocSys deleteDoc.do path traversal

MEDIUM 57

A vulnerability was determined in RainyGao DocSys up to 2.02.36.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00822 Published 2025-10-12 No fix listed CWE-22

TI-2025-10660 CVE-2025-11630 · GHSA-vmvw-crp8-v2g3

RainyGao DocSys File Upload uploadDoc.do updateRealDoc path traversal

MEDIUM 57

A vulnerability was found in RainyGao DocSys up to 2.02.36.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00734 Published 2025-10-12 No fix listed CWE-22

TI-2025-10659 CVE-2025-11629 · GHSA-8g82-vmv5-qwpw

RainyGao DocSys getUserList.do getUserList sql injection

MEDIUM 57

A vulnerability has been found in RainyGao DocSys up to 2.02.36.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00422 Published 2025-10-12 No fix listed CWE-74

TI-2022-04124 CVE-2022-4511 · GHSA-792c-8mr7-jjvh

RainyGao DocSys path traversal

HIGH 72

A vulnerability has been found in RainyGao DocSys and classified as critical.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00835 Published 2022-12-15 No fix listed CWE-22

TI-2022-04039 CVE-2022-4416 · GHSA-rcmh-jmm5-hqq7

RainyGao DocSys getReposAllUsers.do getReposAllUsers sql injection

HIGH 71

A vulnerability was found in RainyGao DocSys.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00527 Published 2022-12-12 No fix listed CWE-707

TI-2022-04030 CVE-2022-4402 · GHSA-6x8q-mcvj-v6v9

RainyGao DocSys ZIP File Decompression path traversal

LOW 33

A vulnerability classified as critical has been found in RainyGao DocSys 2.02.37.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00783 Published 2022-12-11 No fix listed CWE-22

Vulnerabilities

Filters