Qkdjksfkeg

**Name of the Vulnerable Software and Affected Versions** oa system oasys version 1.1 **Description** A SQL injection vulnerability exists in oa system oasys version 1.1. This allows a remote attacker to execute arbitrary code via the `alph` parameters in `src/main/Java/cn/gson/oasys/controller/address/AddrController`. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: oasys version 1.1 Description: oasys version 1.1 is susceptible to a Directory Traversal issue within the `ProcedureController`. This allows potential unauthorized access to files and directories. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** oa system oasys version 1.1 **Description** A SQL injection vulnerability exists in the `allDirector()` method declaration within `src/main/java/cn/gson/oasys/mappers/AddressMapper.java`. This allows a remote attacker to execute arbitrary code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.