XML Entity Injection Vulnerability in UFIDA U8+ CRM Customer Relationship Management Software (CNVD-2021-55194)

formerly known as Shanghai Qitong Software Co., Ltd., is a management digital service company that integrates the development, consulting, marketing, training, implementation and service of management software and Internet applications. An XML entity injection vulnerability exists in UFIDA U8+ CR...

File Upload Vulnerability in Changjie CRM of Changjie Information Technology Co.

Ltd. is a member company of UFIDA. Changjitong is committed to providing social, personalized, service-oriented and small business management support for small and medium-sized enterprises. A file upload vulnerability exists in Smooth CRM, which can be exploited by attackers to gain server contro...

File Upload Vulnerability in UFIDA Nccloud (CNVD-2021-52060)

NC Cloud is a large enterprise digitalization platform launched by UFIDA. A file upload vulnerability exists in UFIDA Nccloud, which can be exploited by an attacker to upload a webshell and gain server privileges...

File Upload Vulnerability in UFIDA NC Cloud Large Enterprise Digitization Platform

NC Cloud, a large enterprise digitalization platform, deeply applies the new generation of digital technologies to build an open, interconnected, convergent and intelligent integrated cloud platform and other three strategic directions for enterprise digital transformation, and provides 18...

Directory Traversal Vulnerability in UFIDA New Century System

UFIDA Network Technology Co., Ltd. is an Asia-Pacific local service provider of management software, ERP software, group management software, human resource management software, and customer relationship management software. A directory traversal vulnerability exists in the UFIDA New Century...

Command Execution Vulnerability in UFIDA PLM

UFIDA PLM Product Lifecycle Management is a strategic management approach. It applies a series of enterprise applications to support the collaborative creation, distribution, application and management of product information across organizations from conceptual design to the end-of-life of the...

SQL Injection Vulnerability in the File Server Configuration Management System of UFIDA Network Technology Corporation (CNVD-2021-37324)

Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. A SQL injection vulnerability exists in the File Server Configuration Management System of UFIDA Network Technology Co., Ltd. that can be exploited by...

Command execution vulnerability in U8 cloud of UFIDA Network Technology Co.

U8 cloud is a new-generation cloud ERP launched by UFIDA, which mainly focuses on growing and innovative enterprises and provides enterprise-level cloud ERP total solutions. A command execution vulnerability exists in UFIDA U8 cloud, which can be exploited by an attacker to gain control of the...

Command Execution Vulnerability in UFIDA NC at UFIDA Network Technology Co.

UFIDA NC is a high-end management software product. A command execution vulnerability exists in UFIDA NC, which can be exploited by an attacker to gain control of the server...

Command Execution Vulnerability in NC Cloud of UFIDA Network Technology Corporation (CNVD-2021-36520)

NC Cloud is a large enterprise digitalization platform launched by UFIDA. A command execution vulnerability exists in UFIDA NC Cloud, which can be exploited by an attacker to gain control of the server...

Command Execution Vulnerability in UFIDA NC (CNVD-2021-36505)

UFIDA NC is a large erp enterprise management system and e-commerce platform. UFIDA NC suffers from a command execution vulnerability that can be exploited by an attacker to gain control of the server...

Weak Password Vulnerability in Smart Factory of UFIDA Network Technology Co.

Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. A weak password vulnerability exists in UFIDA Smart Factory, which can be exploited by attackers to obtain sensitive information...

Information Leakage Vulnerability in KSOA, UFIDA's Enterprise Information Fusion Platform

KSOA can help enterprises in the field of circulation achieve the goals of "transaction automation, management informationization, decision-making intelligence, and business e-commerce" through the combination of different products to meet the needs of the decision-making level, management level,...

SQL Injection Vulnerability in File Server Configuration Management System of UFIDA Network Technology Co.

Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. A SQL injection vulnerability exists in the File Server Configuration Management System of UFIDA Network Technology Co., Ltd. that can be exploited by...

UFIDA U8 has an information leakage vulnerability

Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. An information disclosure vulnerability exists in UFIDA U8, which can be exploited by attackers to obtain sensitive information...

Information Disclosure Vulnerability in UFIDA U8 (CNVD-2021-32492)

Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. An information disclosure vulnerability exists in UFIDA U8, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in NC Cloud of UFIDA Network Technology Corporation (CNVD-2021-34249)

NC Cloud is a digital platform for large enterprises, focusing on digital management, digital operation and digital business, helping large enterprises realize the comprehensive digitalization of people, money, goods and customers. A SQL injection vulnerability exists in NC Cloud of UFIDA Network...

Unauthorized Access Vulnerability in KSOA V9.0, UFIDA's Enterprise Information Fusion Platform

Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. An unauthorized access vulnerability exists in UFIDA's enterprise information fusion platform, KSOA V9.0, which can be exploited by attackers to obtai...

UFIDA's Large Enterprise Digitization Platform Has Logic Flaw Vulnerabilities

UFIDA is a leading provider of management software, ERP software, group management software, human resource management software, customer relationship management software, small business management software, financial and administrative institution management software, automotive industry...

Command Execution Vulnerability in UFIDA NC BeanShell (CNVD-2021-30167)

UFIDA NC is a large erp enterprise management system and e-commerce platform. A command execution vulnerability exists in UFIDA NC BeanShell, which can be exploited by an attacker to gain control of the server...