65 matches found
oa_system 安全漏洞
oasystem is a hailey individual developer's application for the day-to-day operation and management of organizations, used by employees and managers. A security vulnerability exists in oasystem version 2025.01.01 and earlier, which stems from improper handling of the MailNumberId parameter in...
CVE-2025-3392: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in hailey888 oasystem up to 2025.01.01 and classified as problematic. Affected by this issue is the function Save of the file cn/gson/oasys/controller/mail/MailController.java of the component Backend. The manipulation of the argument MailNumberId leads to cross site...
CVE-2025-3390: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, was found in hailey888 oasystem up to 2025.01.01. Affected is the function addandchangeday of the file cn/gson/oass/controller/daymanager/DaymanageController.java of the component Backend. The manipulation of the argument scheduleList leads to...
CVE-2025-3389: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, has been found in hailey888 oasystem up to 2025.01.01. This issue affects the function testMess of the file cn/gson/oasys/controller/inform/InformManageController.java of the component Backend. The manipulation of the argument menu leads to...
CVE-2025-3391: Improper Neutralization of Input During Web Page Generation
A vulnerability has been found in hailey888 oasystem up to 2025.01.01 and classified as problematic. Affected by this vulnerability is the function outAddress of the file cn/gson/oass/controller/address/AddrController. java of the component Backend. The manipulation of the argument outtype leads ...
CVE-2025-3389
The CVE-2025-3389 entry concerns hailey888 oa_system (Backend) with the vulnerable function testMess in InformManageController.java. The issue arises from manipulation of the menu argument, causing cross-site scripting. A remote attacker could exploit it, and public exploit references exist. Conn...
CVE-2025-3389 hailey888 oa_system Backend InformManageController.java testMess cross site scripting
A vulnerability, which was classified as problematic, has been found in hailey888 oasystem up to 2025.01.01. This issue affects the function testMess of the file cn/gson/oasys/controller/inform/InformManageController.java of the component Backend. The manipulation of the argument menu leads to...
CVE-2025-3388 hailey888 oa_system Frontend LoginsController.java loginCheck cross site scripting
A vulnerability classified as problematic was found in hailey888 oasystem up to 2025.01.01. This vulnerability affects the function loginCheck of the file cn/gson/oasys/controller/login/LoginsController.java of the component Frontend. The manipulation of the argument Username leads to cross site...
CVE-2025-3388
CVE-2025-3388 affects the hailey888 oa_system frontend, specifically the function loginCheck in cn/gson/oasys/controller/login/LoginsController.java . The issue is a cross-site scripting vulnerability caused by manipulation of the Username parameter. The attack can be initiated remotely, and publ...
oa_system 代码注入漏洞
oasystem is a hailey individual developer's application for the day-to-day operation and management of an organization, used by employees and managers. A code injection vulnerability exists in oasystem version 2025.01.01 and earlier, which stems from the fact that incorrect manipulation of the...
oa_system 安全漏洞
oasystem is a hailey individual developer's application for the day-to-day operation and management of organizations, used by employees and managers. A security vulnerability exists in oasystem version 2025.01.01 and earlier, which stems from an incorrect manipulation of the parameter outtype can...
CVE-2025-3388: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic was found in hailey888 oasystem up to 2025.01.01. This vulnerability affects the function loginCheck of the file cn/gson/oasys/controller/login/LoginsController.java of the component Frontend. The manipulation of the argument Username leads to cross site...
CVE-2025-1958
A vulnerability, which was classified as critical, has been found in aaluoxiang oasystem 1.0. This issue affects some unknown processing of the file src/main/resources/mappers/address-mapper.xml. The manipulation of the argument outtype leads to sql injection. The attack may be initiated remotely...
CVE-2025-1958
A vulnerability, which was classified as critical, has been found in aaluoxiang oasystem 1.0. This issue affects some unknown processing of the file src/main/resources/mappers/address-mapper.xml. The manipulation of the argument outtype leads to sql injection. The attack may be initiated remotely...
CVE-2025-1958 aaluoxiang oa_system address-mapper.xml sql injection
A vulnerability, which was classified as critical, has been found in aaluoxiang oasystem 1.0. This issue affects some unknown processing of the file src/main/resources/mappers/address-mapper.xml. The manipulation of the argument outtype leads to sql injection. The attack may be initiated remotely...
CVE-2025-1958 aaluoxiang oa_system address-mapper.xml sql injection
A vulnerability, which was classified as critical, has been found in aaluoxiang oasystem 1.0. This issue affects some unknown processing of the file src/main/resources/mappers/address-mapper.xml. The manipulation of the argument outtype leads to sql injection. The attack may be initiated remotely...
CVE-2025-1958
CVE-2025-1958 affects the aaluoxiang oa_system 1.0. The vulnerability occurs in the processing of the file src/main/resources/mappers/address-mapper.xml where manipulation of the outtype parameter leads to SQL injection. The issue can be triggered remotely, and exploits have been disclosed public...
CVE-2025-1958: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in aaluoxiang oasystem 1.0. This issue affects some unknown processing of the file src/main/resources/mappers/address-mapper.xml. The manipulation of the argument outtype leads to sql injection. The attack may be initiated remotely...
oa_system 注入漏洞
oasystem is an application system used by aaluoxiang individual developers for the daily operation and management of organizations, employees and managers. An injection vulnerability exists in oasystem version 1.0, which stems from the presence of a SQL injection problem...