Oasys · Oasys · CVE-2025-44034
**Name of the Vulnerable Software and Affected Versions**
oa system oasys version 1.1
**Description**
A SQL injection vulnerability exists in oa system oasys version 1.1. This allows a remote attacker to execute arbitrary code via the `alph` parameters in `src/main/Java/cn/gson/oasys/controller/address/AddrController`.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.