oa_system 代码注入漏洞

oasystem is a hailey individual developer's application for the day-to-day operation and management of an organization, used by employees and managers. A code injection vulnerability exists in oasystem version 2025.01.01 and earlier, which stems from the fact that incorrect manipulation of the...

CVE-2025-1958

A vulnerability, which was classified as critical, has been found in aaluoxiang oasystem 1.0. This issue affects some unknown processing of the file src/main/resources/mappers/address-mapper.xml. The manipulation of the argument outtype leads to sql injection. The attack may be initiated remotely...

CVE-2025-1958

A vulnerability, which was classified as critical, has been found in aaluoxiang oasystem 1.0. This issue affects some unknown processing of the file src/main/resources/mappers/address-mapper.xml. The manipulation of the argument outtype leads to sql injection. The attack may be initiated remotely...

CVE-2025-1958

CVE-2025-1958 affects the aaluoxiang oa_system 1.0. The vulnerability occurs in the processing of the file src/main/resources/mappers/address-mapper.xml where manipulation of the outtype parameter leads to SQL injection. The issue can be triggered remotely, and exploits have been disclosed public...

CVE-2025-1958 aaluoxiang oa_system address-mapper.xml sql injection

A vulnerability, which was classified as critical, has been found in aaluoxiang oasystem 1.0. This issue affects some unknown processing of the file src/main/resources/mappers/address-mapper.xml. The manipulation of the argument outtype leads to sql injection. The attack may be initiated remotely...

CVE-2025-1958 aaluoxiang oa_system address-mapper.xml sql injection

A vulnerability, which was classified as critical, has been found in aaluoxiang oasystem 1.0. This issue affects some unknown processing of the file src/main/resources/mappers/address-mapper.xml. The manipulation of the argument outtype leads to sql injection. The attack may be initiated remotely...

oa_system 注入漏洞

oasystem is an application system used by aaluoxiang individual developers for the daily operation and management of organizations, employees and managers. An injection vulnerability exists in oasystem version 1.0, which stems from the presence of a SQL injection problem...

CVE-2021-40644

An SQL Injection vulnerability exists in oasys oasystem as of 9/7/2021 in resources/mappers/notice-mapper.xml...

CVE-2021-40644

An SQL Injection vulnerability exists in oasys oasystem as of 9/7/2021 in resources/mappers/notice-mapper.xml...

Sql injection

An SQL Injection vulnerability exists in oasys oasystem as of 9/7/2021 in resources/mappers/notice-mapper.xml...

CVE-2021-40644

An SQL Injection vulnerability exists in oasys oasystem as of 9/7/2021 in resources/mappers/notice-mapper.xml...

CVE-2021-40644

The CVE-2021-40644 entry concerns an SQL injection in the oasys OA system, specifically affecting resources/mappers/notice-mapper.xml. Connected sources corroborate: oasys OA system is vulnerable to SQL injection and references point to the same file path. The exact vulnerable component is the no...