CVE-2026-75327

DocSys-master V2.02.85 contains an arbitrary file upload vulnerability in the uploadMarkdownPic interface, located in src/com/DocSystem/controller/DocController.java. The lack of proper validation on uploaded files allows an attacker to place arbitrary files on the server, which can lead to remot...

EUVD-2026-66701

In DocSys-master V2.02.85, the uploadMarkdownPic interface in src/com/DocSystem/controller/DocController.java has an arbitrary file upload vulnerability:...