Multiple JAVA Deserialization Vulnerabilities in UFIDA NC System

UFIDA NC system is a world-class high-end management software for group enterprises. There are multiple JAVA deserialization vulnerabilities in UFIDA NC system, which can be exploited by attackers to remotely execute operating system commands and obtain server control privileges...

SQL Injection Vulnerability in the queryInvcl Method of the UFIDA UFO System

UFIDA UFO system is UFIDA software comes with tabular data processing software. A SQL injection vulnerability exists in the queryInvcl method of UFIDA UFO System. An attacker is allowed to exploit the vulnerability to obtain database information...