Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-44034 1 Aaluoxiang 1 Oa System 2026-11-07 8 High
SQL injection vulnerability in oa_system oasys v.1.1 allows a remote attacker to execute arbitrary code via the alph parameters in src/main/Java/cn/gson/oasys/controller/address/AddrController
CVE-2025-44033 1 Aaluoxiang 1 Oa System 2025-11-19 9.8 Critical
SQL injection vulnerability in oa_system oasys v.1.1 allows a remote attacker to execute arbitrary code via the allDirector() method declaration in src/main/java/cn/gson/oasys/mappers/AddressMapper.java