PT-2025-16589 · Unknown · Misstt123 Oasys

Name of the Vulnerable Software and Affected Versions: misstt123 oasys version 1.0 Description: A vulnerability has been found in the Sticky Notes Handler component of misstt123 oasys, leading to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to th...

oasys 安全漏洞

oasys is an OA automated office system by the individual developer Programmer Second Senior Brother. A security vulnerability exists in oasys version 1.0, which stems from the Sticky Notes Handler component being susceptible to cross-site request forgery attacks...

CVE-2024-48270

An issue in the component /logins of oasys v1.1 allows attackers to access sensitive information via a burst attack...

CVE-2024-48270

An issue in the component /logins of oasys v1.1 allows attackers to access sensitive information via a burst attack...

PT-2024-33064 · Oasys · Oasys

Name of the Vulnerable Software and Affected Versions: oasys version 1.1 Description: The issue in the component /logins allows attackers to access sensitive information via a burst attack. Recommendations: For oasys version 1.1, consider restricting access to the /logins component to minimize th...

CVE-2024-48270

An issue in the component /logins of oasys v1.1 allows attackers to access sensitive information via a burst attack...

CVE-2024-48270

An issue in the component /logins of oasys v1.1 allows attackers to access sensitive information via a burst attack...

oasys 安全漏洞

oasys is an OA automated office system by the individual developer of Programmer Second Senior Brother Programmer Second Senior Brother. A security vulnerability exists in oasys v1.1. An attacker exploiting this vulnerability can access sensitive information via a burst attack...

CVE-2024-48270

The CVE-2024-48270 entry concerns oasys v1.1, specifically the /logins component. The issue allows an attacker to access sensitive information via a burst attack, with the NVD/CVE details listing a high-severity CVSS 3.1 vector (Network access, Low attack complexity, No privileges required, No us...

oasys SQL Injection Vulnerability

oasys is an OA office automation system. oasys is vulnerable to SQL injection, and no details of the vulnerability are currently available...

CVE-2021-40644

An SQL Injection vulnerability exists in oasys oasystem as of 9/7/2021 in resources/mappers/notice-mapper.xml...

CVE-2021-40644

An SQL Injection vulnerability exists in oasys oasystem as of 9/7/2021 in resources/mappers/notice-mapper.xml...

CVE-2021-40644

An SQL Injection vulnerability exists in oasys oasystem as of 9/7/2021 in resources/mappers/notice-mapper.xml...

CVE-2021-40644

An SQL Injection vulnerability exists in oasys oasystem as of 9/7/2021 in resources/mappers/notice-mapper.xml...

CVE-2021-40644

The CVE-2021-40644 entry concerns an SQL injection in the oasys OA system, specifically affecting resources/mappers/notice-mapper.xml. Connected sources corroborate: oasys OA system is vulnerable to SQL injection and references point to the same file path. The exact vulnerable component is the no...

oasys SQL注入漏洞

oasys is an OA office automation system. oasys is vulnerable to SQL injection, and no details of the vulnerability are currently available...

SQL injection vulnerability exists in oasys (CNVD-2021-54083)

oasys is an OA office automation system , integrated jpa, mybatis and other frameworks. A SQL injection vulnerability exists in oasys, which can be exploited by an attacker to obtain sensitive information from the database...

File upload vulnerability exists in oasys

oasys is an OA office automation system. A file upload vulnerability exists in oasys, which can be exploited by an attacker to gain control of the server...

Logic flaw vulnerability in oasys

oasys is an OA office automation system , the use of Maven for project management , springboot framework based on the development of the project , mysql underlying database , the front-end freemarker template engine , Bootstrap as the front-end UI framework , integrated jpa, mybatis and other...

SQL Injection Vulnerability in oasys (OA automated office system)

oasys OA automated office system is oriented to the daily operation and management of the organization, employees and managers use the application system to improve the efficiency of the company's office. A SQL injection vulnerability exists in oasys OA automated office system. An attacker can...