79 matches found
Design/Logic Flaw
An arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface of YonBIP v323.05 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2023-51928
An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction method of YonBIP v323.05 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2023-51928
An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction method of YonBIP v323.05 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2023-51926
YonBIP v323.05 was discovered to contain an arbitrary file read vulnerability via the nc.bs.framework.comn.serv.CommonServletDispatcher component...
CVE-2023-51927
YonBIP v323.05 was discovered to contain a SQL injection vulnerability via the com.yonyou.hrcloud.attend.web.AttendScriptController.runScript method...
CVE-2023-51926
YonBIP v323.05 was discovered to contain an arbitrary file read vulnerability via the nc.bs.framework.comn.serv.CommonServletDispatcher component...
CVE-2023-51927
YonBIP v323.05 was discovered to contain a SQL injection vulnerability via the com.yonyou.hrcloud.attend.web.AttendScriptController.runScript method...
Sql injection
YonBIP v323.05 was discovered to contain a SQL injection vulnerability via the com.yonyou.hrcloud.attend.web.AttendScriptController.runScript method...
Arbitrary file deletion
YonBIP v323.05 was discovered to contain an arbitrary file read vulnerability via the nc.bs.framework.comn.serv.CommonServletDispatcher component...
CVE-2023-51927
YonBIP v323.05 was discovered to contain a SQL injection vulnerability via the com.yonyou.hrcloud.attend.web.AttendScriptController.runScript method...
CVE-2023-51926
YonBIP v3_23.05 is affected by an arbitrary file read vulnerability in the nc.bs.framework.comn.serv.CommonServletDispatcher component. The issue is described across multiple sources consistent with CVE-2023-51926, with a CVSSv3.1 base score of 7.5 (High) and a network-based attack vector requiri...
YonBIP 安全漏洞
YonBIP is a new generation of products developed by UFIDA, as the world's leading enterprise digital intelligence platform and application software. A SQL injection vulnerability exists in YonBIP, which can be exploited by attackers to obtain sensitive information or execute arbitrary code...
YonBIP 安全漏洞
YonBIP is a new generation of products developed by UFIDA, as the world's leading enterprise digital intelligence platform and application software. A code execution vulnerability exists in UFIDA YonBIP, which can be exploited by attackers to execute arbitrary code...
CVE-2023-51926
YonBIP v323.05 was discovered to contain an arbitrary file read vulnerability via the nc.bs.framework.comn.serv.CommonServletDispatcher component...
CVE-2023-51924
An arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface of YonBIP v323.05 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2023-51927
YonBIP v3_23.05 is affected by a SQL injection via the runScript() method of com.yonyou.hrcloud.attend.web.AttendScriptController. The vulnerability, described across sources as a SQL injection in YonBIP, has a CVSS v3.1 base score of 9.8 (CRITICAL) with network attack vector, no authentication, ...
CVE-2023-51906
Affected software: yonyou YonBIP, specifically version 3 23.05. The vulnerability arises in the ServiceDispatcherServlet uap.framework.rc.itf.IResourceManager component, allowing a remote attacker to execute arbitrary code via a crafted script. The issue is treated as a code execution vulnerabili...
CVE-2023-51928
An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction method of YonBIP v323.05 allows attackers to execute arbitrary code via uploading a crafted file...
CVE-2023-51925
An arbitrary file upload vulnerability in the nccloud.web.arcp.taskmonitor.action.ArcpUploadAction.doAction method of YonBIP v323.05 allows attackers to execute arbitrary code via uploading a crafted file...