8 matches found
CVE-2026-75328
In DocSys-master V2.02.85, the downloadDocEx interface in src/com/DocSystem/controller/DocController.java has an arbitrary file read vulnerability:...
CVE-2026-75327
In DocSys-master V2.02.85, the uploadMarkdownPic interface in src/com/DocSystem/controller/DocController.java has an arbitrary file upload vulnerability:...
CVE-2026-75328
In DocSys-master V2.02.85, the downloadDocEx interface in src/com/DocSystem/controller/DocController.java has an arbitrary file read vulnerability:...
CVE-2026-75328
DocSys-master version 2.02.85 is vulnerable to an arbitrary file read vulnerability within the downloadDocEx interface located in src/com/DocSystem/controller/DocController.java. This flaw allows an attacker to access files on the system that should remain restricted. No information regarding a p...
PT-2026-82319
Name of the Vulnerable Software and Affected Versions DocSys-master version 2.02.85 Description An arbitrary file read issue exists in the 'downloadDocEx' interface located in src/com/DocSystem/controller/DocController.java. This allows an attacker to read files from the system that they should n...
CVE-2026-75328
In DocSys-master V2.02.85, the downloadDocEx interface in src/com/DocSystem/controller/DocController.java has an arbitrary file read vulnerability:...
CVE-2026-75328: Improper Limitation of a Pathname to a Restricted Directory
In DocSys-master V2.02.85, the downloadDocEx interface in src/com/DocSystem/controller/DocController.java has an arbitrary file read vulnerability:...
CVE-2026-75327: Unrestricted Upload of File with Dangerous Type
In DocSys-master V2.02.85, the uploadMarkdownPic interface in src/com/DocSystem/controller/DocController.java has an arbitrary file upload vulnerability:...