https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-15494.htmlhttps://patchthecve.com/cve/CVE-2025-15494.htmlWed, 17 Jun 2026 08:37:53 +0000MEDIUM 6.3: A vulnerability has been found in RainyGao DocSys up to 2.02.37. This affects an unknown function of the file com/DocSystem/mapping/UserMapper.xml. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public andhttps://patchthecve.com/cve/CVE-2025-15493.htmlhttps://patchthecve.com/cve/CVE-2025-15493.htmlWed, 17 Jun 2026 08:37:53 +0000MEDIUM 6.3: A flaw has been found in RainyGao DocSys up to 2.02.36. The impacted element is an unknown function of the file src/com/DocSystem/mapping/ReposAuthMapper.xml. Executing a manipulation of the argument searchWord can lead to sql injection. It is possible to launch the attack remotely. The exploit has https://patchthecve.com/cve/CVE-2025-15492.htmlhttps://patchthecve.com/cve/CVE-2025-15492.htmlWed, 17 Jun 2026 08:37:53 +0000MEDIUM 6.3: A vulnerability was detected in RainyGao DocSys up to 2.02.36. The affected element is an unknown function of the file src/com/DocSystem/mapping/GroupMemberMapper.xml. Performing a manipulation of the argument searchWord results in sql injection. It is possible to initiate the attack remotely. The e