CVE-2022-4416

CVE-2022-4416 affects RainyGao DocSys, specifically the function /DocSystem/Repos/getReposAllUsers.do -> getReposAllUsers. The vulnerability arises from improper handling of the arguments searchWord and reposId , enabling remote SQL injection . Publicly disclosed exploit exists; impact is desc...

CVE-2022-4402

A vulnerability classified as critical has been found in RainyGao DocSys 2.02.37. This affects an unknown part of the component ZIP File Decompression Handler. The manipulation leads to path traversal: '../filedir'. It is possible to initiate the attack remotely. The exploit has been disclosed to...

Path traversal

A vulnerability classified as critical has been found in RainyGao DocSys 2.02.37. This affects an unknown part of the component ZIP File Decompression Handler. The manipulation leads to path traversal: '../filedir'. It is possible to initiate the attack remotely. The exploit has been disclosed to...

CVE-2022-4402 RainyGao DocSys ZIP File Decompression path traversal

A vulnerability classified as critical has been found in RainyGao DocSys 2.02.37. This affects an unknown part of the component ZIP File Decompression Handler. The manipulation leads to path traversal: '../filedir'. It is possible to initiate the attack remotely. The exploit has been disclosed to...

PT-2022-27082 · Unknown · Rainygao Docsys

Name of the Vulnerable Software and Affected Versions: RainyGao DocSys version 2.02.37 Description: A critical vulnerability has been found in the ZIP File Decompression Handler component of RainyGao DocSys. The issue allows for path traversal, specifically using '../filedir', and can be initiate...

CVE-2022-4402

CVE-2022-4402 affects RainyGao DocSys 2.02.37, specifically the ZIP File Decompression Handler. The issue is a path traversal vulnerability triggered by using "../filedir" that can be exploited remotely. Multiple sources confirm the exploit has been publicly disclosed, and the vulnerability is la...

CVE-2022-4402 RainyGao DocSys ZIP File Decompression path traversal

A vulnerability classified as critical has been found in RainyGao DocSys 2.02.37. This affects an unknown part of the component ZIP File Decompression Handler. The manipulation leads to path traversal: '../filedir'. It is possible to initiate the attack remotely. The exploit has been disclosed to...