PT-2024-14326

Name of the Vulnerable Software and Affected Versions YonBIP version 3 23.05 Description An arbitrary file upload vulnerability in the doAction method of nccloud.web.arcp.taskmonitor.action.ArcpUploadAction allows attackers to execute arbitrary code via uploading a crafted file. Recommendations F...

PT-2024-14328

Name of the Vulnerable Software and Affected Versions YonBIP version 3 23.05 Description A SQL injection issue was discovered in YonBIP via the runScript method of the com.yonyou.hrcloud.attend.web.AttendScriptController class. This allows for potential exploitation. Recommendations For YonBIP...

PT-2024-14325

Name of the Vulnerable Software and Affected Versions YonBIP version 3 23.05 Description An arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface allows attackers to execute arbitrary code via uploading a crafted file. Recommendations For YonBIP version 3 23.0...

PT-2024-14329

Name of the Vulnerable Software and Affected Versions YonBIP version 3 23.05 Description An arbitrary file upload vulnerability in the doAction method of nccloud.web.arcp.taskmonitor.action.ArcpUploadAction allows attackers to execute arbitrary code via uploading a crafted file. Recommendations F...

PT-2024-14324 · Yonyou · Yonyou Yonbip

Name of the Vulnerable Software and Affected Versions: yonyou YonBIP version 3 23.05 Description: An issue in yonyou YonBIP allows a remote attacker to execute arbitrary code via a crafted script to the ServiceDispatcherServlet uap.framework.rc.itf.IResourceManager component. Recommendations: For...

PT-2024-14327

Name of the Vulnerable Software and Affected Versions YonBIP version 3 23.05 Description The issue is an arbitrary file read vulnerability. It occurs via the CommonServletDispatcher component in the nc.bs.framework.comn.serv package. Recommendations For YonBIP version 3 23.05, consider restrictin...