SQL Injection Vulnerability in UFIDA GRP-U8 (CNVD-2023-58024)

UFIDA GRP-U8 is a government financial management software. A SQL injection vulnerability exists in UFIDA GRP-U8, which can be exploited by attackers to obtain sensitive information from the database...

Command Execution Vulnerability in UFIDA GRP-U8 (CNVD-2023-02755)

UFIDA GRP-U8 is a new generation product launched by UFIDA focusing on the national e-government business and based on cloud computing technology, which is the government financial management software in the field of finance for administrative undertakings in China. A command execution...

SQL Injection Vulnerability in UFIDA GRP-U8 Administration and Utilities Internal Control Management Software (New Government Accounting System Special Edition) (CNVD-2022-84009)

Founded in 1988, UFIDA is a leading digital intelligence platform and service provider for enterprises and public organizations in China and around the world. A SQL injection vulnerability exists in UFIDA GRP-U8 Administration and Utilities Internal Control Management Software New Government...

用友GRP-U8财务管理软件 /R9iPortal/cm/cm_info_list.jsp文件itype_id参数SQL注入漏洞

No description provided by source...

用友GRP-U8系统 external 参数uid SQL注入漏洞

No description provided by source...

用友grp-u8 /services/userInfoWeb SQL注入

No description provided by source...

用友GRP-U8 系统登陆处参数UserNameText 存在SQL注入

No description provided by source...

用友 GRP u8 /IMLoginServlet?uid=1&pwd=1 sql注入

No description provided by source...

用友 GRP-U8教育财务管理软件 /R9iPortal/cm/cm_function_save.jsp sql注入

No description provided by source...

用友 GRP-U8财务管理软件 /UpdateNoticeRtnInfoInc?info_id=1&urid=2 sql注入

No description provided by source...

用友GRP-U8 gzQuerydetail 参数KJND SQL注入漏洞

No description provided by source...

用友 GRP-U8管理软件 /IMRoleServlet?pt=del&rolecode=1 sql注入

No description provided by source...

用友 GRP-U8管理软件 /IMUnitServlet?pt=add&org_code=1 sql注入

No description provided by source...

用友 GRP-u8 /UploadFile 任意文件上传

No description provided by source...

用友GRP-U8 财务管理软件userInfoWeb接口敏感信息泄露漏洞

No description provided by source...

用友GRP-U8 政府财务管理系统 UpdateNoticeRtnInfoInc urid 参数SQL注入漏洞

No description provided by source...

用友某重要系统任意文件上传漏洞之二

简要描述： 用友某重要系统任意文件上传漏洞之二 详细说明： 用友GRP-U8 财务管理软件 该servlet存在漏洞，可直接上传任意文件到服务器 None 这里为：http://210.44.112.101https://images.seebug.org/upload/chopper.jsp chopper 5个案例： http://210.44.112.101/UploadFile http://124.128.96.98:8001/UploadFile http://61.139.105.105:8008/UploadFile...

用友某重要系统两处高危SQL注射

简要描述： 用友某重要系统两处高危SQL注射 详细说明： 该系统为用友GRP-U8 财务管理软件，涉及到非常多敏感的信息 /IMLoginServlet?uid=1&pwd=1 /persionTreeServlet?bmdm=1 SQL注入1 /IMLoginServlet?uid=1&pwd=1 sqlmap.py -u "http://61.139.105.105:8008/IMLoginServlet?uid=1&pwd=1" SQL注入2 sqlmap.py -u "http://61.139.105.105:8008/persionTreeServlet?bmdm=1"...