3 matches found
CVE-2025-44033
SQL injection vulnerability in oasystem oasys v.1.1 allows a remote attacker to execute arbitrary code via the allDirector method declaration in src/main/java/cn/gson/oasys/mappers/AddressMapper.java...
CVE-2025-44033
SQL injection vulnerability in oasystem oasys v.1.1 allows a remote attacker to execute arbitrary code via the allDirector method declaration in src/main/java/cn/gson/oasys/mappers/AddressMapper.java...
PT-2025-35292
Name of the Vulnerable Software and Affected Versions: oa system oasys version 1.1 Description: A SQL injection vulnerability exists in the allDirector method declaration within src/main/java/cn/gson/oasys/mappers/AddressMapper.java. This allows a remote attacker to execute arbitrary code...