CVE-2025-11630

A vulnerability was found in RainyGao DocSys up to 2.02.36. Affected is the function updateRealDoc of the file /Doc/uploadDoc.do of the component File Upload. Performing manipulation of the argument path results in path traversal. The attack can be initiated remotely. The exploit has been made...

MxsDoc path traversal vulnerability

MxsDoc is a web-based document management system from Rainy Open Source. A path traversal vulnerability exists in MxsDoc version 2.02.36 and earlier, which stems from the incorrect manipulation of the path parameter in the file /Doc/uploadDoc.do, and could lead to a path traversal attack...

CVE-2021-37465

In NCH Quorum v2.03 and earlier, XSS exists via /uploaddoc?id= reflected...

CVE-2021-37465

CVE-2021-37465 affects NCH Quorum v2.03 and earlier. The vulnerability is a reflected XSS via the /uploaddoc?id= parameter, as described by NVD/CNVD/CNNVD/Red Hat entries. The connected documents confirm the affected product/version and attack vector; no remediation details are provided in the do...

CVE-2021-37465: Improper Neutralization of Input During Web Page Generation

In NCH Quorum v2.03 and earlier, XSS exists via /uploaddoc?id= reflected...

PT-2021-21680

Name of the Vulnerable Software and Affected Versions NCH Quorum versions 2.03 and earlier Description The issue exists due to a reflected XSS via the /uploaddoc?id= API endpoint. Recommendations For versions 2.03 and earlier, update to a version later than 2.03 to resolve the issue...