SQL Injection Vulnerability in aaluoxiang oa_system's External Address Book Handler

CVE-2025-6829

What is CVE-2025-6829?

A critical vulnerability has been identified in the aaluoxiang oa_system, specifically affecting the outAddress function of the External Address Book Handler. This flaw allows for remote SQL injection attacks, enabling attackers to manipulate database queries and potentially gain unauthorized access to sensitive information. Due to the lack of versioning in this product, it is crucial for users to assess their systems for potential exploitation and take immediate action to mitigate risks.

References