4 matches found
CVE-2025-11630
A vulnerability was found in RainyGao DocSys up to 2.02.36. Affected is the function updateRealDoc of the file /Doc/uploadDoc.do of the component File Upload. Performing manipulation of the argument path results in path traversal. The attack can be initiated remotely. The exploit has been made...
MxsDoc 路径遍历漏洞
MxsDoc is a web-based document management system from Rainy Open Source. A path traversal vulnerability exists in MxsDoc version 2.02.36 and earlier, which stems from the incorrect manipulation of the path parameter in the file /Doc/uploadDoc.do, and could lead to a path traversal attack...
CVE-2021-37465
In NCH Quorum v2.03 and earlier, XSS exists via /uploaddoc?id= reflected...
CVE-2021-37465
CVE-2021-37465 affects NCH Quorum v2.03 and earlier. The vulnerability is a reflected XSS via the /uploaddoc?id= parameter, as described by NVD/CNVD/CNNVD/Red Hat entries. The connected documents confirm the affected product/version and attack vector; no remediation details are provided in the do...