SQL Injection Vulnerability in UFIDA NC Cloud (CNVD-2024-21817)

UFIDA NC Cloud inventory is a large enterprise digitalization platform. UFIDA NC Cloud suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in UFIDA NC Cloud (CNVD-2024-21815)

UFIDA NC Cloud inventory is a large enterprise digitalization platform. UFIDA NC Cloud suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in UFIDA NC Cloud (CNVD-2024-21816)

UFIDA NC Cloud inventory is a large enterprise digitalization platform. UFIDA NC Cloud suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information from the database...

Command Execution Vulnerability in UFIDA NC

UFIDA Network Technology Co., Ltd. is a company whose business scope includes the technical development, technical consulting and technology transfer of electronic computer software, hardware and external equipment. A command execution vulnerability exists in UFIDA NC, which can be exploited by a...

YonBIP File Upload Vulnerability in UFIDA Network Technology Co.

YonBIP is a new generation of products developed by UFIDA, as the world's leading enterprise digital intelligence platform and application software. A file upload vulnerability exists in YonBIP, which can be exploited by an attacker to upload arbitrary files and execute arbitrary code in the...

YonBIP Code Execution Vulnerability in UFIDA Network Technology Co.

YonBIP is a new generation of products developed by UFIDA, as the world's leading enterprise digital intelligence platform and application software. A code execution vulnerability exists in UFIDA YonBIP, which can be exploited by attackers to execute arbitrary code...

UFIDA Network Technology Corporation YonBIP SQL Injection Vulnerability

YonBIP is a new generation of products developed by UFIDA, as the world's leading enterprise digital intelligence platform and application software. A SQL injection vulnerability exists in YonBIP, which can be exploited by attackers to obtain sensitive information or execute arbitrary code...

UFIDA Network Technology Corporation YonBIP Arbitrary File Read Vulnerability

YonBIP is a new generation of products developed by UFIDA, as the world's leading enterprise digital intelligence platform and application software. An arbitrary file read vulnerability exists in YonBIP, which can be exploited by an attacker to read the contents of system files...

YonBIP 安全漏洞

YonBIP is a new generation of products developed by UFIDA, as the world's leading enterprise digital intelligence platform and application software. A SQL injection vulnerability exists in YonBIP, which can be exploited by attackers to obtain sensitive information or execute arbitrary code...

YonBIP 安全漏洞

YonBIP is a new generation of products developed by UFIDA, as the world's leading enterprise digital intelligence platform and application software. An arbitrary file read vulnerability exists in YonBIP, which can be exploited by an attacker to read the contents of system files...

YonBIP 安全漏洞

YonBIP is a new generation of products developed by UFIDA, as the world's leading enterprise digital intelligence platform and application software. A code execution vulnerability exists in UFIDA YonBIP, which can be exploited by attackers to execute arbitrary code...

SQL Injection Vulnerability in NC Cloud of UFIDA Network Technology Corporation (CNVD-2024-03280)

NC Cloud is a large-scale enterprise digitalization platform, focusing on digital management, digital operation and digital business, helping large-scale enterprises realize the comprehensive digitalization of people, money, goods and customers. A SQL injection vulnerability exists in UFIDA NC...

Command execution vulnerability exists in UFIDA U8 Cloud (CNVD-2023-91638)

UFIDA Network Technology Corporation is an enterprise cloud services and software provider. A command execution vulnerability exists in UFIDA U8 Cloud, which can be exploited by attackers to execute arbitrary commands...

Information Disclosure Vulnerability in UFIDA UAP System

UFIDA Network Technology Co., Ltd. is a leading global provider of enterprise cloud services and software. An information disclosure vulnerability exists in the UFIDA UAP system, which can be exploited by attackers to obtain sensitive information...

Arbitrary File Download Vulnerability in Yonyou UAP/NC of UFIDA Network Technology Co.

Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. An arbitrary file download vulnerability exists in Yonyou UAP/NC, which can be exploited by attackers to obtain sensitive information...

CVE-2023-4748

A vulnerability, which was classified as critical, has been found in Yongyou UFIDA-NC up to 20230807. This issue affects some unknown processing of the file PrintTemplateFileServlet.java. The manipulation of the argument filePath leads to path traversal. The attack may be initiated remotely. The...

Path traversal

A vulnerability, which was classified as critical, has been found in Yongyou UFIDA-NC up to 20230807. This issue affects some unknown processing of the file PrintTemplateFileServlet.java. The manipulation of the argument filePath leads to path traversal. The attack may be initiated remotely. The...

CVE-2023-4748 Yongyou UFIDA-NC PrintTemplateFileServlet.java path traversal

A vulnerability, which was classified as critical, has been found in Yongyou UFIDA-NC up to 20230807. This issue affects some unknown processing of the file PrintTemplateFileServlet.java. The manipulation of the argument filePath leads to path traversal. The attack may be initiated remotely. The...

CVE-2023-4748

CVE-2023-4748 affects Yongyou UFIDA-NC (versions up to 20230807). The vulnerability is caused by manipulation of the filePath argument in PrintTemplateFileServlet.java, enabling path traversal. The issue can be exploited remotely and the public exploit is disclosed. No fixed version is documented...

PT-2023-30464 · Yonyou · Yongyou Ufida-Nc

Name of the Vulnerable Software and Affected Versions: Yongyou UFIDA-NC versions up to 20230807 Description: A critical issue has been found in the processing of the file PrintTemplateFileServlet.java, where the manipulation of the filePath argument leads to path traversal. This issue can be...