CVE-2025-44034

A SQL injection vulnerability exists in the oa_system oasys version 1.1 (an OA office automation system). The flaw is caused by the misuse of the alph parameter within the src/main/Java/cn/gson/oasys/controller/address/AddrController file. This vulnerability allows a remote attacker to execute ar...