CVE-2021-40644

An SQL Injection vulnerability exists in oasys oa_system as of 9/7/2021 in resources/mappers/notice-mapper.xml.
References
Link Resource
https://github.com/novysodope/VulReq/blob/main/oa_system Exploit Third Party Advisory
https://gitee.com/aaluoxiang/oa_system Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:oasys_project:oasys:2021-09-07:*:*:*:*:*:*:*

Information

Published : 2022-03-30 14:15

Updated : 2022-04-05 08:06


NVD link : CVE-2021-40644

Mitre link : CVE-2021-40644


JSON object : View

CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Advertisement

dedicated server usa

Products Affected

oasys_project

  • oasys