170 matches found
UFIDA U8 has an information leakage vulnerability
Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. An information disclosure vulnerability exists in UFIDA U8, which can be exploited by attackers to obtain sensitive information...
Information Disclosure Vulnerability in UFIDA U8 (CNVD-2021-32492)
Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. An information disclosure vulnerability exists in UFIDA U8, which can be exploited by attackers to obtain sensitive information...
SQL Injection Vulnerability in UFIDA U8-OA Enterprise Edition (CNVD-2021-29143)
Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. A SQL injection vulnerability exists in UFIDA U8-OA Enterprise Edition, which can be exploited by attackers to obtain sensitive information from the...
UFIDA U8 OA Collaboration Management Software has an arbitrary file download vulnerability
Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. An arbitrary file download vulnerability exists in UFIDA U8 OA Collaboration Management Software. An attacker can exploit this vulnerability to downlo...
SQL Injection Vulnerability in UFIDA U8-OA is***.jsp
Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. A SQL injection vulnerability exists in UFIDA U8-OA is.jsp, which can be exploited by an attacker to obtain sensitive information from the database...
UFIDA U8-OA l***.jsp suffers from SQL injection vulnerability.
Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. A SQL injection vulnerability exists in UFIDA U8-OA l.jsp, which can be exploited by an attacker to obtain sensitive information from the database...
UFIDA Software Corporation UFIDA U8 Remote Existence Command Execution Vulnerability
UFIDA is an integrated, converged and ecological enterprise cloud service provider. A command execution vulnerability exists in UFIDA U8 Remote of UFIDA Software Corporation, which can be exploited by attackers to gain control of a server...
SQL Injection Vulnerability in UFIDA U8-OA se***.jsp
Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. A SQL injection vulnerability exists in UFIDA U8-OA se.jsp, which can be exploited by an attacker to obtain sensitive information from the database...
SQL injection vulnerability in UF U8-OA in***.jsp file
Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. A SQL injection vulnerability exists in the UFIDA U8-OA in.jsp file, which can be exploited by an attacker to obtain sensitive database information...
SQL Injection Vulnerability in UFIDA U8-OA (CNVD-2021-12781)
Founded in 1988, UFIDA is a leading global provider of cloud services and software for enterprises and public organizations. A SQL injection vulnerability exists in UFIDA U8-OA. An attacker can exploit the vulnerability to gain access to sensitive database information...
UFIDA U8-OA has information leakage vulnerability
Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. An information disclosure vulnerability exists in UFIDA U8-OA. An attacker can exploit the vulnerability to obtain the SessionID of all users and log ...
Unauthorized Access Vulnerability in UFIDA U8-OA
Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. An unauthorized access vulnerability exists in UFIDA U8-OA. An attacker can exploit the vulnerability to obtain sensitive information...
CVE-2020-35903
An issue was discovered in the dync crate before 0.5.0 for Rust. VecCopy allows misaligned element access because u8 is not always the type in question...
SQL Injection Vulnerability in UFIDA U8-OA
Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. A SQL injection vulnerability exists in UFIDA U8-OA, which can be exploited by attackers to obtain sensitive information from the database...
RUSTSEC-2020-0050 VecCopy allows misaligned access to elements
VecCopy::data is created as a Vec of u8 but can be used to store and retrieve elements of different types leading to misaligned access. The issue was resolved in v0.5.0 by replacing data being stored by Vec with a custom managed pointer. Elements are now stored and retrieved using types with prop...
CVE-2020-11650
An issue was discovered in iXsystems FreeNAS and TrueNAS 11.2 before 11.2-u8 and 11.3 before 11.3-U1. It allows a denial of service. The login authentication component has no limits on the length of an authentication message or the rate at which such messages are sent...
DOM Cross-Site Scripting Vulnerability in UFIDA U8+ Financial System
UFIDA U8+ is a fine financial software. A stored cross-site scripting vulnerability exists in the UFIDA U8+ financial system. It allows an attacker to insert malicious js code into a page to obtain user cookies and other information, leading to user hijacking...
用友某系统SQL注入
简要描述： SQL注入未及时升级导致getshell。 详细说明： 存在问题的IP：139.129.98.49 其443、801端口分别运行了U8远程接入应用，存在已知的SQL注入漏洞。 漏洞参考： WooYun: 用友优普U8系统两处sql注入可无限制getshell无需登陆 报错： https://139.129.98.49/Server/CmxcheckBind.php?b=2&a=1%cc 写shell： http://139.129.98.49:801/Server/CmxcheckBind.php?b=2&a=1' and 1=2 union select...