{"api_version":"1","generated_at":"2026-07-23T14:40:21+00:00","cve":"CVE-2025-11629","urls":{"html":"https://cve.report/CVE-2025-11629","api":"https://cve.report/api/cve/CVE-2025-11629.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2025-11629","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-11629"},"summary":{"title":"RainyGao DocSys getUserList.do getUserList sql injection","description":"A vulnerability has been found in RainyGao DocSys up to 2.02.36. This impacts the function getUserList of the file /Manage/getUserList.do. Such manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","state":"PUBLISHED","assigner":"VulDB","published_at":"2025-10-12 07:15:43","updated_at":"2026-04-29 01:00:01"},"problem_types":["CWE-74","CWE-89","CWE-89 SQL Injection","CWE-74 Injection"],"metrics":[{"version":"4.0","source":"cna@vuldb.com","type":"Secondary","score":"2.1","severity":"LOW","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","data":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":2.1,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"PROOF_OF_CONCEPT","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}},{"version":"4.0","source":"CNA","type":"DECLARED","score":"5.3","severity":"MEDIUM","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","data":{"baseScore":5.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","version":"4.0"}},{"version":"3.1","source":"nvd@nist.gov","type":"Primary","score":"9.8","severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"}},{"version":"3.1","source":"cna@vuldb.com","type":"Secondary","score":"6.3","severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"}},{"version":"3.1","source":"CNA","type":"DECLARED","score":"6.3","severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","data":{"baseScore":6.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","version":"3.1"}},{"version":"3.0","source":"CNA","type":"DECLARED","score":"6.3","severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","data":{"baseScore":6.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","version":"3.0"}},{"version":"2.0","source":"cna@vuldb.com","type":"Secondary","score":"6.5","severity":"","vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}},{"version":"2.0","source":"CNA","type":"DECLARED","score":"6.5","severity":"","vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR","data":{"baseScore":6.5,"vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR","version":"2.0"}}],"references":[{"url":"https://vuldb.com/?submit.664843","name":"https://vuldb.com/?submit.664843","refsource":"cna@vuldb.com","tags":["Third Party Advisory","VDB Entry"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://github.com/xkalami-Tta0/CVE/blob/main/DocSys/sql%E6%B3%A8%E5%85%A5.md","name":"https://github.com/xkalami-Tta0/CVE/blob/main/DocSys/sql%E6%B3%A8%E5%85%A5.md","refsource":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["Exploit","Third Party Advisory"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://vuldb.com/?ctiid.328041","name":"https://vuldb.com/?ctiid.328041","refsource":"cna@vuldb.com","tags":["Permissions Required","VDB Entry"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://vuldb.com/?id.328041","name":"https://vuldb.com/?id.328041","refsource":"cna@vuldb.com","tags":["Third Party Advisory","VDB Entry"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-11629","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-11629","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"RainyGao","product":"DocSys","version":"affected 2.02.0","platforms":[]},{"source":"CNA","vendor":"RainyGao","product":"DocSys","version":"affected 2.02.1","platforms":[]},{"source":"CNA","vendor":"RainyGao","product":"DocSys","version":"affected 2.02.2","platforms":[]},{"source":"CNA","vendor":"RainyGao","product":"DocSys","version":"affected 2.02.3","platforms":[]},{"source":"CNA","vendor":"RainyGao","product":"DocSys","version":"affected 2.02.4","platforms":[]},{"source":"CNA","vendor":"RainyGao","product":"DocSys","version":"affected 2.02.5","platforms":[]},{"source":"CNA","vendor":"RainyGao","product":"DocSys","version":"affected 2.02.6","platforms":[]},{"source":"CNA","vendor":"RainyGao","product":"DocSys","version":"affected 2.02.7","platforms":[]},{"source":"CNA","vendor":"RainyGao","product":"DocSys","version":"affected 2.02.8","platforms":[]},{"source":"CNA","vendor":"RainyGao","product":"DocSys","version":"affected 2.02.9","platforms":[]},{"source":"CNA","vendor":"RainyGao","product":"DocSys","version":"affected 2.02.10","platforms":[]},{"source":"CNA","vendor":"RainyGao","product":"DocSys","version":"affected 2.02.11","platforms":[]},{"source":"CNA","vendor":"RainyGao","product":"DocSys","version":"affected 2.02.12","platforms":[]},{"source":"CNA","vendor":"RainyGao","product":"DocSys","version":"affected 2.02.13","platforms":[]},{"source":"CNA","vendor":"RainyGao","product":"DocSys","version":"affected 2.02.14","platforms":[]},{"source":"CNA","vendor":"RainyGao","product":"DocSys","version":"affected 2.02.15","platforms":[]},{"source":"CNA","vendor":"RainyGao","product":"DocSys","version":"affected 2.02.16","platforms":[]},{"source":"CNA","vendor":"RainyGao","product":"DocSys","version":"affected 2.02.17","platforms":[]},{"source":"CNA","vendor":"RainyGao","product":"DocSys","version":"affected 2.02.18","platforms":[]},{"source":"CNA","vendor":"RainyGao","product":"DocSys","version":"affected 2.02.19","platforms":[]},{"source":"CNA","vendor":"RainyGao","product":"DocSys","version":"affected 2.02.20","platforms":[]},{"source":"CNA","vendor":"RainyGao","product":"DocSys","version":"affected 2.02.21","platforms":[]},{"source":"CNA","vendor":"RainyGao","product":"DocSys","version":"affected 2.02.22","platforms":[]},{"source":"CNA","vendor":"RainyGao","product":"DocSys","version":"affected 2.02.23","platforms":[]},{"source":"CNA","vendor":"RainyGao","product":"DocSys","version":"affected 2.02.24","platforms":[]},{"source":"CNA","vendor":"RainyGao","product":"DocSys","version":"affected 2.02.25","platforms":[]},{"source":"CNA","vendor":"RainyGao","product":"DocSys","version":"affected 2.02.26","platforms":[]},{"source":"CNA","vendor":"RainyGao","product":"DocSys","version":"affected 2.02.27","platforms":[]},{"source":"CNA","vendor":"RainyGao","product":"DocSys","version":"affected 2.02.28","platforms":[]},{"source":"CNA","vendor":"RainyGao","product":"DocSys","version":"affected 2.02.29","platforms":[]},{"source":"CNA","vendor":"RainyGao","product":"DocSys","version":"affected 2.02.30","platforms":[]},{"source":"CNA","vendor":"RainyGao","product":"DocSys","version":"affected 2.02.31","platforms":[]},{"source":"CNA","vendor":"RainyGao","product":"DocSys","version":"affected 2.02.32","platforms":[]},{"source":"CNA","vendor":"RainyGao","product":"DocSys","version":"affected 2.02.33","platforms":[]},{"source":"CNA","vendor":"RainyGao","product":"DocSys","version":"affected 2.02.34","platforms":[]},{"source":"CNA","vendor":"RainyGao","product":"DocSys","version":"affected 2.02.35","platforms":[]},{"source":"CNA","vendor":"RainyGao","product":"DocSys","version":"affected 2.02.36","platforms":[]}],"timeline":[{"source":"CNA","time":"2025-10-11T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"source":"CNA","time":"2025-10-11T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"source":"CNA","time":"2025-10-11T15:56:18.000Z","lang":"en","value":"VulDB entry last update"}],"solutions":[],"workarounds":[],"exploits":[],"credits":[{"source":"CNA","value":"Tta0 (VulDB User)","lang":"en"}],"nvd_cpes":[{"cve_year":"2025","cve_id":"11629","vulnerable":"1","versionEndIncluding":"2.02.36","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"docsys_project","cpe5":"docsys","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2025-11629","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-10-15T19:52:12.247988Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2025-10-15T19:52:15.161Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["exploit"],"url":"https://github.com/xkalami-Tta0/CVE/blob/main/DocSys/sql%E6%B3%A8%E5%85%A5.md"}],"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"product":"DocSys","vendor":"RainyGao","versions":[{"status":"affected","version":"2.02.0"},{"status":"affected","version":"2.02.1"},{"status":"affected","version":"2.02.2"},{"status":"affected","version":"2.02.3"},{"status":"affected","version":"2.02.4"},{"status":"affected","version":"2.02.5"},{"status":"affected","version":"2.02.6"},{"status":"affected","version":"2.02.7"},{"status":"affected","version":"2.02.8"},{"status":"affected","version":"2.02.9"},{"status":"affected","version":"2.02.10"},{"status":"affected","version":"2.02.11"},{"status":"affected","version":"2.02.12"},{"status":"affected","version":"2.02.13"},{"status":"affected","version":"2.02.14"},{"status":"affected","version":"2.02.15"},{"status":"affected","version":"2.02.16"},{"status":"affected","version":"2.02.17"},{"status":"affected","version":"2.02.18"},{"status":"affected","version":"2.02.19"},{"status":"affected","version":"2.02.20"},{"status":"affected","version":"2.02.21"},{"status":"affected","version":"2.02.22"},{"status":"affected","version":"2.02.23"},{"status":"affected","version":"2.02.24"},{"status":"affected","version":"2.02.25"},{"status":"affected","version":"2.02.26"},{"status":"affected","version":"2.02.27"},{"status":"affected","version":"2.02.28"},{"status":"affected","version":"2.02.29"},{"status":"affected","version":"2.02.30"},{"status":"affected","version":"2.02.31"},{"status":"affected","version":"2.02.32"},{"status":"affected","version":"2.02.33"},{"status":"affected","version":"2.02.34"},{"status":"affected","version":"2.02.35"},{"status":"affected","version":"2.02.36"}]}],"credits":[{"lang":"en","type":"reporter","value":"Tta0 (VulDB User)"}],"descriptions":[{"lang":"en","value":"A vulnerability has been found in RainyGao DocSys up to 2.02.36. This impacts the function getUserList of the file /Manage/getUserList.do. Such manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way."},{"lang":"de","value":"Es wurde eine Schwachstelle in RainyGao DocSys up to 2.02.36 entdeckt. Betroffen hiervon ist die Funktion getUserList der Datei /Manage/getUserList.do. Durch das Manipulieren mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Der Angriff kann remote ausgeführt werden. Der Exploit wurde der Öffentlichkeit bekannt gemacht und könnte verwendet werden."}],"metrics":[{"cvssV4_0":{"baseScore":5.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","version":"4.0"}},{"cvssV3_1":{"baseScore":6.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","version":"3.1"}},{"cvssV3_0":{"baseScore":6.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","version":"3.0"}},{"cvssV2_0":{"baseScore":6.5,"vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR","version":"2.0"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-89","description":"SQL Injection","lang":"en","type":"CWE"}]},{"descriptions":[{"cweId":"CWE-74","description":"Injection","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2025-10-12T07:02:06.148Z","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","shortName":"VulDB"},"references":[{"name":"VDB-328041 | RainyGao DocSys getUserList.do getUserList sql injection","tags":["vdb-entry","technical-description"],"url":"https://vuldb.com/?id.328041"},{"name":"VDB-328041 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"],"url":"https://vuldb.com/?ctiid.328041"},{"name":"Submit #664843 | https://github.com/RainyGao-GitHub/DocSys/ DocSys 2.02.36 SQL injection","tags":["third-party-advisory"],"url":"https://vuldb.com/?submit.664843"},{"tags":["exploit"],"url":"https://github.com/xkalami-Tta0/CVE/blob/main/DocSys/sql%E6%B3%A8%E5%85%A5.md"}],"timeline":[{"lang":"en","time":"2025-10-11T00:00:00.000Z","value":"Advisory disclosed"},{"lang":"en","time":"2025-10-11T02:00:00.000Z","value":"VulDB entry created"},{"lang":"en","time":"2025-10-11T15:56:18.000Z","value":"VulDB entry last update"}],"title":"RainyGao DocSys getUserList.do getUserList sql injection"}},"cveMetadata":{"assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","assignerShortName":"VulDB","cveId":"CVE-2025-11629","datePublished":"2025-10-12T07:02:06.148Z","dateReserved":"2025-10-11T13:51:03.160Z","dateUpdated":"2025-10-15T19:52:15.161Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2025-10-12 07:15:43","lastModifiedDate":"2026-04-29 01:00:01","problem_types":["CWE-74","CWE-89","CWE-89 SQL Injection","CWE-74 Injection"],"metrics":{"cvssMetricV40":[{"source":"cna@vuldb.com","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":2.1,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"LOW","vulnAvailabilityImpact":"LOW","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"PROOF_OF_CONCEPT","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"cvssMetricV31":[{"source":"cna@vuldb.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","baseScore":6.3,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":3.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"cna@vuldb.com","type":"Secondary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:docsys_project:docsys:*:*:*:*:*:*:*:*","versionEndIncluding":"2.02.36","matchCriteriaId":"4B914AE0-E759-4F59-A694-2A556E6B939F"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2025","CveId":"11629","Ordinal":"1","Title":"RainyGao DocSys getUserList.do getUserList sql injection","CVE":"CVE-2025-11629","Year":"2025"},"notes":[{"CveYear":"2025","CveId":"11629","Ordinal":"1","NoteData":"A vulnerability has been found in RainyGao DocSys up to 2.02.36. This impacts the function getUserList of the file /Manage/getUserList.do. Such manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","Type":"Description","Title":"RainyGao DocSys getUserList.do getUserList sql injection"}]}}}