CVE-2025-15492

RainyGao DocSys 2.02.36 and earlier contains a SQL injection in GroupMemberMapper.xml (unknown function) where manipulating the searchWord parameter enables remote exploitation. Public exploit exists; vendor not responding to disclosures. Affected component: src/com/DocSystem/mapping/GroupMemberM...