CVE-2021-40644

An SQL Injection vulnerability exists in oasys oa_system as of 9/7/2021 in resources/mappers/notice-mapper.xml.

• CWE-89

• https://gitee.com/aaluoxiang/oa_systemThird Party Advisory
• https://github.com/novysodope/VulReq/blob/main/oa_systemExploit, Third Party Advisory
• https://gitee.com/aaluoxiang/oa_systemThird Party Advisory
• https://github.com/novysodope/VulReq/blob/main/oa_systemExploit, Third Party Advisory

Published

Mar 30, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-40636OS4ED openSIS 8.0 is affected by SQL Injection in CheckDupli…7.5
• CVE-2021-40637OS4ED openSIS 8.0 is affected by cross-site scripting (XSS) …6.1
• CVE-2021-40639Improper access control in Jfinal CMS 5.1.0 allows attackers…7.5
• CVE-2021-4064Use after free in screen capture in Google Chrome on ChromeO…8.8
• CVE-2021-40642Textpattern CMS v4.8.7 and older vulnerability exists throug…4.3
• CVE-2021-40643EyesOfNetwork before 07-07-2021 has a Remote Code Execution …9.8
• CVE-2021-40645An SQL Injection vulnerability exists in glorylion JFinalOA …6.5
• CVE-2021-40647In man2html 1.6g, a specific string being read in from a fil…5.5
• CVE-2021-40648In man2html 1.6g, a filename can be created to overwrite the…5.5
• CVE-2021-40649In Connx Version 6.2.0.1269 (20210623), a cookie can be issu…6.5
• CVE-2021-4065Use after free in autofill in Google Chrome prior to 96.0.46…8.8
• CVE-2021-40650In Connx Version 6.2.0.1269 (20210623), a cookie can be issu…6.5