Skip to content
Aaluoxiang vulnerabilities
Newest
-
aaluoxiang oa system
SQL injection vulnerability in oa_system oasys v.1.1 allows a remote attacker to execute...
CVE-2025-44034
8.0 High
-
aaluoxiang oa system
oasys v1.1 is vulnerable to Directory Traversal in ProcedureController.
CVE-2025-29592
5.6 Medium
-
aaluoxiang oa system
SQL injection vulnerability in oa_system oasys v.1.1 allows a remote attacker to execute...
CVE-2025-44033
9.8 Critical
-
aaluoxiang oa system
aaluoxiang oa_system External Address Book outAddress sql injection
CVE-2025-6829
5.3 Medium
-
aaluoxiang oa system
aaluoxiang oa_system ProcedureController.java image path traversal
CVE-2025-5545
5.3 Medium
-
aaluoxiang oa system
aaluoxiang oa_system UserpanelController.java image path traversal
CVE-2025-5544
5.3 Medium
-
aaluoxiang oa system
hailey888 oa_system Backend MailController.java save cross site scripting
CVE-2025-3392
5.1 Medium
-
aaluoxiang oa system
hailey888 oa_system Backend AddrController. java outAddress cross site scripting
CVE-2025-3391
5.1 Medium
-
aaluoxiang oa system
hailey888 oa_system Backend DaymanageController.java addandchangeday cross site scripting
CVE-2025-3390
5.1 Medium
-
aaluoxiang oa system
hailey888 oa_system Backend InformManageController.java testMess cross site scripting
CVE-2025-3389
5.1 Medium
-
aaluoxiang oa system
hailey888 oa_system Frontend LoginsController.java loginCheck cross site scripting
CVE-2025-3388
5.3 Medium
-
aaluoxiang oa system
aaluoxiang oa_system address-mapper.xml sql injection
CVE-2025-1958
5.3 Medium