CVE-2025-11631

Affected software : RainyGao DocSys up to 2.02.36. Vulnerability : path traversal in the file /Doc/deleteDoc.do via manipulation of the path parameter. Impact : potential for unauthorized file system access; described as remote, with prior public exploit. Multiple connected sources corroborate th...

PT-2024-35472 · Flagsmith · Flagsmith

Name of the Vulnerable Software and Affected Versions: Flagsmith versions prior to 2.134.1 Description: The issue concerns the "get document" endpoint, which is not correctly protected by permissions. This could potentially allow unauthorized access. Recommendations: For versions prior to 2.134.1...

PT-2024-15831 · Unknown · Mintplex-Labs/Anything-Llm

Name of the Vulnerable Software and Affected Versions: mintplex-labs/anything-llm affected versions not specified Description: A privilege escalation issue exists, allowing users with the default role to delete documents uploaded by the admin. This is due to improper access control checks, enabli...

Exploit for Path Traversal in Solutions-Atlantic Regulatory_Reporting_System

CVE-2022-29597: Local File Inclusion in RSS v500 The RRSht...

CVE-2021-36543

Cross-Site Request Forgery CSRF vulnerability in the /op/op.UnlockDocument.php in SeedDMS v5.1.x 5.1.23 and v6.0.x 6.0.16 allows a remote attacker to unlock any document without victim's knowledge, by enticing an authenticated user to visit an attacker's web page...

PT-2012-3149 · Dolibarr · Dolibarr Cms

Name of the Vulnerable Software and Affected Versions: Dolibarr CMS version 3.2.0 Alpha Description: The issue allows remote attackers to read arbitrary files and possibly execute arbitrary code via a .. dot dot in the file parameter to "document.php" or backtopage parameter in a create action to...