3 matches found
EUVD-2026-66802
In DocSys-master V2.02.85, the downloadDocEx interface in src/com/DocSystem/controller/DocController.java has an arbitrary file read vulnerability:...
5.4AI score
SaveExploits0References2
EUVD-2026-66701
In DocSys-master V2.02.85, the uploadMarkdownPic interface in src/com/DocSystem/controller/DocController.java has an arbitrary file upload vulnerability:...
5.4AI score
SaveExploits0References1
CVE-2026-75328
DocSys (version V2.02.85 ), an open-source document management system, is affected by an arbitrary file read vulnerability in the downloadDocEx interface located in src/com/DocSystem/controller/DocController.java. The flaw allows an attacker to read arbitrary files accessible to the application. ...
5.4AI score
SaveExploits0References1
20