RainyGao DocSys Path Traversal Vulnerability in File Deletion Functionality

A path traversal vulnerability has been identified in RainyGao DocSys versions through 2.02.36. The issue arises in the file '/Doc/deleteDoc.do', where manipulation of the 'path' argument can lead to unauthorized file deletion on the server. This vulnerability can be exploited remotely, and a public proof-of-concept exploit is available.

Impact

Exploitation of this vulnerability allows for arbitrary file deletion on the server.

Reproduction

To reproduce this vulnerability, send a request to the '/Doc/deleteDoc.do' endpoint with a crafted 'path' argument that exploits the path traversal flaw. This can be done by including directory traversal sequences in the 'path' argument to navigate outside of the intended directory and delete arbitrary files on the server.