Command Execution Vulnerability in UFIDA U8Cloud at UFIDA Network Technology Co.

UFIDA U8Cloud is an enterprise-level ERP used to assist companies in achieving efficient and digitalized business collaboration and process management. A command execution vulnerability exists in UFIDA U8Cloud, which can be exploited by an attacker to execute arbitrary commands...

UFIDA U8 Cloud suffers from SQL injection vulnerability (CNVD-2024-37307)

U8 Cloud is an enterprise-class ERP used to help companies achieve efficient and digital business collaboration and process management. A SQL injection vulnerability exists in UFIDA U8 Cloud, which can be exploited by remote attackers to submit a special request and obtain sensitive database...