| Title | https://github.com/RainyGao-GitHub/DocSys/ DocSys 2.02.36 SQL injection |
|---|
| Description | The /Manage/getUserList.do interface of DocSystem has a SQL injection vulnerability.，Attackers can obtain sensitive database information or take over database or even server permissions through this sql injection vulnerability |
|---|
| Source | ⚠️ https://github.com/xkalami-Tta0/CVE/blob/main/DocSys/sql%E6%B3%A8%E5%85%A5.md |
|---|
| User | Tta0 (UID 91084) |
|---|
| Submission | 09/29/2025 07:13 (7 months ago) |
|---|
| Moderation | 10/11/2025 15:51 (12 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 328041 [RainyGao DocSys up to 2.02.36 /Manage/getUserList.do getUserList sql injection] |
|---|
| Points | 16 |
|---|