PT-2026-1055

Name of the Vulnerable Software and Affected Versions Yonyou KSOA version 9.0 Description A flaw exists in Yonyou KSOA 9.0 that allows for remote code execution. The issue stems from a SQL injection point within an unknown function in the /kp/PrintZPYG.jsp file. Specifically, manipulating the...

Yonyou KSOA SQL注入漏洞

Yonyou KSOA is an enterprise management software from China's UFIDA Yonyou company. A SQL injection vulnerability exists in Yonyou KSOA version 9.0, which stems from incorrect manipulation of the parameter ID in the file /worksheet/deluser.jsp, which could lead to a SQL injection attack...

PT-2026-1043

Name of the Vulnerable Software and Affected Versions Yonyou KSOA version 9.0 Description A SQL injection issue exists in Yonyou KSOA 9.0 due to manipulation of the ID argument within the HTTP GET parameter handler of the /worksheet/agent worksdel.jsp file. Remote exploitation is possible. The...

SQL Injection Vulnerability in KSOA, UFIDA's Enterprise Information Fusion Platform, UFIDA Network Technology Co. Ltd (CNVD-2024-39843)

The UFIDA KSOA is an enterprise-level application platform based on SOA architecture, aiming to provide comprehensive informatization solutions for enterprises. A SQL injection vulnerability exists in UFIDA Space-Time Enterprise Information Integration Platform KSOA, which can be exploited by an...

Information Leakage Vulnerability in KSOA, UFIDA's Enterprise Information Fusion Platform

KSOA can help enterprises in the field of circulation achieve the goals of "transaction automation, management informationization, decision-making intelligence, and business e-commerce" through the combination of different products to meet the needs of the decision-making level, management level,...

Unauthorized Access Vulnerability in KSOA V9.0, UFIDA's Enterprise Information Fusion Platform

Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. An unauthorized access vulnerability exists in UFIDA's enterprise information fusion platform, KSOA V9.0, which can be exploited by attackers to obtai...