CVE-2025-11630

A vulnerability was found in RainyGao DocSys up to 2.02.36. Affected is the function updateRealDoc of the file /Doc/uploadDoc.do of the component File Upload. Performing manipulation of the argument path results in path traversal. The attack can be initiated remotely. The exploit has been made...

MxsDoc 路径遍历漏洞

MxsDoc is a web-based document management system from Rainy Open Source. A path traversal vulnerability exists in MxsDoc version 2.02.36 and earlier, which stems from the incorrect manipulation of the path parameter in the file /Doc/uploadDoc.do, and could lead to a path traversal attack...

CVE-2021-37465

CVE-2021-37465 affects NCH Quorum v2.03 and earlier. The vulnerability is a reflected XSS via the /uploaddoc?id= parameter, as described by NVD/CNVD/CNNVD/Red Hat entries. The connected documents confirm the affected product/version and attack vector; no remediation details are provided in the do...

CVE-2021-37465

In NCH Quorum v2.03 and earlier, XSS exists via /uploaddoc?id= reflected...

CVE-2021-37465: Improper Neutralization of Input During Web Page Generation

In NCH Quorum v2.03 and earlier, XSS exists via /uploaddoc?id= reflected...

PT-2021-21680

Name of the Vulnerable Software and Affected Versions NCH Quorum versions 2.03 and earlier Description The issue exists due to a reflected XSS via the /uploaddoc?id= API endpoint. Recommendations For versions 2.03 and earlier, update to a version later than 2.03 to resolve the issue...