提交 #664848: https://github.com/RainyGao-GitHub/DocSys/ DocSys 2.02.36 Delete any file

The /Doc/deleteDoc.do interface of DocSystem has an arbitrary file deletion vulnerability, which allows attackers to delete any file on the server.

• 来源: ⚠️ https://github.com/xkalami-Tta0/CVE/blob/main/DocSys/%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E5%88%A0%E9%99%A4.md
• 用户: Tta0 (UID 91084)
• 提交: 2025-09-29 07時21分 (7 月前)
• 管理: 2025-10-11 15時51分 (12 days later)
• 状态: 已接受
• VulDB条目: 328043 [RainyGao DocSys 直到 2.02.36 /Doc/deleteDoc.do path 目录遍历]
• 积分: 15