RainyGao

3 exploits Active since Dec 2022
CVE-2022-4511 GITEE MEDIUM java
DocSys - Path Traversal in UserController#getUserImg
A vulnerability has been found in RainyGao DocSys and classified as critical. Affected by this vulnerability is an unknown functionality of the component com.DocSystem.controller.UserController#getUserImg. The manipulation leads to path traversal: '../filedir'. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-215851.
4,102 stars
CVSS 5.3
CVE-2022-4416 GITEE MEDIUM java
mxsdoc - SQL Injection via searchWord/reposId Parameter in getReposAllUsers Function
A vulnerability was found in RainyGao DocSys. It has been declared as critical. This vulnerability affects the function getReposAllUsers of the file /DocSystem/Repos/getReposAllUsers.do. The manipulation of the argument searchWord/reposId leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-215278 is the identifier assigned to this vulnerability.
4,102 stars
CVSS 6.3
CVE-2022-4402 GITEE MEDIUM java
docsys < 2.02.37 - Path Traversal via ZIP File Decompression Handler
A vulnerability classified as critical has been found in RainyGao DocSys 2.02.37. This affects an unknown part of the component ZIP File Decompression Handler. The manipulation leads to path traversal: '../filedir'. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-215271.
4,102 stars
CVSS 4.7