qkdjksfkeg/Security-Collections

qkdjksfkeg/Security-Collections

GitHubGitHub
GitHubgithub.com
Releases0
Stars2
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-44034↗
8 HIGH—

SQL injection vulnerability in oa_system oasys v.1.1 allows a remote attacker to execute arbitrary code via the alph parameters in src/main/Java/cn/gson/oasys/controller/address/AddrController

CVE-2025-29592↗
5.6 MEDIUM—

oasys v1.1 is vulnerable to Directory Traversal in ProcedureController.

CVE-2025-44033↗
9.8 CRITICAL—

SQL injection vulnerability in oa_system oasys v.1.1 allows a remote attacker to execute arbitrary code via the allDirector() method declaration in src/main/java/cn/gson/oasys/mappers/AddressMapper.java