CVE-2022-4416

A vulnerability was found in RainyGao DocSys. It has been declared as critical. This vulnerability affects the function getReposAllUsers of the file /DocSystem/Repos/getReposAllUsers.do. The manipulation of the argument searchWord/reposId leads to sql injection. The attack can be initiated...

Sql injection

A vulnerability was found in RainyGao DocSys. It has been declared as critical. This vulnerability affects the function getReposAllUsers of the file /DocSystem/Repos/getReposAllUsers.do. The manipulation of the argument searchWord/reposId leads to sql injection. The attack can be initiated...

CVE-2022-4416

CVE-2022-4416 affects RainyGao DocSys, specifically the function /DocSystem/Repos/getReposAllUsers.do -> getReposAllUsers. The vulnerability arises from improper handling of the arguments searchWord and reposId , enabling remote SQL injection . Publicly disclosed exploit exists; impact is desc...