| 标题 | https://github.com/RainyGao-GitHub/DocSys/releases/tag/DocSys_V2 RainyGao-GitHub 2.02.36 SQL injection |
|---|
| 描述 | The /Manage/getGroupAllUsers.do interface of DocSystemV2.02.36 has a SQL injection vulnerability.，Attackers can obtain sensitive database information or take over database or even server permissions through this sql injection vulnerability |
|---|
| 来源 | ⚠️ https://github.com/xkalami-Tta0/CVE/blob/main/DocSys/SQL%E6%B3%A8%E5%85%A53.md |
|---|
| 用户 | xkalami (UID 90843) |
|---|
| 提交 | 2025-12-28 10時30分 (5 月前) |
|---|
| 管理 | 2026-01-09 12時31分 (12 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 340270 [RainyGao DocSys 直到 2.02.36 GroupMemberMapper.xml searchWord SQL注入] |
|---|
| 积分 | 16 |
|---|