Skip to content
OpenAdvisories

Vendor

aaluoxiang

4 known vulnerabilities.

aaluoxiang at a glance

Last 12 months
0
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202530
May 202500
Apr 202500
Mar 202510
Feb 202500
Jan 202500
Dec 202400

Products

oa_system 4
All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Medium 6.3
    CVE-2025-6829

    aaluoxiang oa_system External Address Book outAddress sql injection

    A vulnerability was found in aaluoxiang oa_system up to c3a08168c144f27256a90838492c713f55f1b207 and classified as critical. This issue affects the function outAddress of the component External Address Book Handler. The manipulation leads to sql injection. Th…

    aaluoxiang oa_system
  • Medium 4.3
    CVE-2025-5545

    aaluoxiang oa_system ProcedureController.java image path traversal

    A vulnerability classified as problematic has been found in aaluoxiang oa_system up to 5b445a6227b51cee287bd0c7c33ed94b801a82a5. This affects the function image of the file src/main/java/cn/gson/oasys/controller/process/ProcedureController.java. The manipulat…

    aaluoxiang oa_system
  • Medium 4.3
    CVE-2025-5544

    aaluoxiang oa_system UserpanelController.java image path traversal

    A vulnerability was found in aaluoxiang oa_system up to 5b445a6227b51cee287bd0c7c33ed94b801a82a5. It has been rated as problematic. Affected by this issue is the function image of the file src/main/java/cn/gson/oasys/controller/user/UserpanelController.java. …

    aaluoxiang oa_system
  • Medium 6.3
    CVE-2025-1958

    aaluoxiang oa_system address-mapper.xml sql injection

    A vulnerability, which was classified as critical, has been found in aaluoxiang oa_system 1.0. This issue affects some unknown processing of the file src/main/resources/mappers/address-mapper.xml. The manipulation of the argument outtype leads to sql injectio…

    aaluoxiang oa_system