Approved changes feed: RSS · Atom
cpe:2.3:a:rainygao:docsys:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Rainygao (5870bc40-19b3-5b70-ae3d-0f24a2f2eaea) |
|---|---|
| Product | Docsys (2ef3c60f-a8fc-5776-8509-2e4f44295f74) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-15494 |
vulnerable | 2026-06-08 07:06:36.309672 |
RainyGao DocSys UserMapper.xml sql injection
MEDIUM (6.3)
A vulnerability has been found in RainyGao DocSys up to 2.02.37. This affects an unknown function of the file com/DocSystem/mapping/UserMapper.xml. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-01-09T16:32:08.806Z
Updated: 2026-02-23T08:26:07.001Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15493 |
vulnerable | 2026-06-08 07:06:36.309190 |
RainyGao DocSys ReposAuthMapper.xml sql injection
MEDIUM (6.3)
A flaw has been found in RainyGao DocSys up to 2.02.36. The impacted element is an unknown function of the file src/com/DocSystem/mapping/ReposAuthMapper.xml. Executing a manipulation of the argument searchWord can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-01-09T16:32:06.558Z
Updated: 2026-02-23T08:25:53.233Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-15492 |
vulnerable | 2026-06-08 07:06:36.307799 |
RainyGao DocSys GroupMemberMapper.xml sql injection
MEDIUM (6.3)
A vulnerability was detected in RainyGao DocSys up to 2.02.36. The affected element is an unknown function of the file src/com/DocSystem/mapping/GroupMemberMapper.xml. Performing a manipulation of the argument searchWord results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-01-09T16:02:07.110Z
Updated: 2026-02-23T08:25:40.504Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11631 |
vulnerable | 2026-06-08 07:04:28.646062 |
RainyGao DocSys deleteDoc.do path traversal
MEDIUM (5.4)
A vulnerability was determined in RainyGao DocSys up to 2.02.36. Affected by this vulnerability is an unknown functionality of the file /Doc/deleteDoc.do. Executing manipulation of the argument path can lead to path traversal. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-10-12T08:02:06.131Z
Updated: 2025-10-17T14:33:31.032Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11630 |
vulnerable | 2026-06-08 07:04:28.645581 |
RainyGao DocSys File Upload uploadDoc.do updateRealDoc path traversal
MEDIUM (6.3)
A vulnerability was found in RainyGao DocSys up to 2.02.36. Affected is the function updateRealDoc of the file /Doc/uploadDoc.do of the component File Upload. Performing manipulation of the argument path results in path traversal. The attack can be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-10-12T07:32:04.891Z
Updated: 2025-10-17T14:34:15.741Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11629 |
vulnerable | 2026-06-08 07:04:28.643631 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4511 |
vulnerable | 2026-06-08 05:51:59.658189 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4416 |
vulnerable | 2026-06-08 05:51:37.426499 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4402 |
vulnerable | 2026-06-08 05:51:37.406820 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.