CVE-2025-44034: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in oasystem oasys v.1.1 allows a remote attacker to execute arbitrary code via the alph parameters in src/main/Java/cn/gson/oasys/controller/address/AddrController...

CVE-2025-44034

A SQL injection vulnerability exists in the oa_system oasys version 1.1 (an OA office automation system). The flaw is caused by the misuse of the alph parameter within the src/main/Java/cn/gson/oasys/controller/address/AddrController file. This vulnerability allows a remote attacker to execute ar...

oa_system 跨站脚本漏洞

oasystem is a hailey individual developer's application for the day-to-day operation and management of organizations, used by employees and managers. A security vulnerability exists in oasystem versions prior to v2025.01.01, which stems from improperly cleaned inputs for the parameter outtype in...

CVE-2025-3391

A vulnerability has been found in hailey888 oasystem up to 2025.01.01 and classified as problematic. Affected by this vulnerability is the function outAddress of the file cn/gson/oass/controller/address/AddrController. java of the component Backend. The manipulation of the argument outtype leads ...

CVE-2025-3391 hailey888 oa_system Backend AddrController. java outAddress cross site scripting

A vulnerability has been found in hailey888 oasystem up to 2025.01.01 and classified as problematic. Affected by this vulnerability is the function outAddress of the file cn/gson/oass/controller/address/AddrController. java of the component Backend. The manipulation of the argument outtype leads ...