| Titolo | https://github.com/RainyGao-GitHub/DocSys/releases/tag/DocSys_V2 RainyGao-GitHub 2.02.37 SQL injection |
|---|
| Descrizione | The /Manage/getUserList.do interface of DocSystemV2.02.37 has a SQL injection vulnerability.，Attackers can obtain sensitive database information or take over database or even server permissions through this sql injection vulnerability |
|---|
| Fonte | ⚠️ https://github.com/xkalami-Tta0/CVE/blob/main/DocSys/SQL%E6%B3%A8%E5%85%A52.02.37.md |
|---|
| Utente | xkalami (UID 90843) |
|---|
| Sottomissione | 28/12/2025 11:44 (10 mesi fa) |
|---|
| Moderazione | 09/01/2026 12:31 (12 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 340272 [RainyGao DocSys fino a 2.02.37 UserMapper.xml userName iniezione SQL] |
|---|
| Punti | 16 |
|---|