Arbitrary File Read Vulnerability in UFIDA NC-IUFO Reporting System

UFIDA Network Technology Co. Founded in 1988, UFIDA is an advanced global provider of cloud services, software, and financial services for enterprises and public organizations. An arbitrary file read vulnerability exists in the UFIDA NC-IUFO Reporting System, which can be exploited by attackers t...

SQL Injection Vulnerability in UFIDA NC-IUFO Reporting System

UFIDA NC-IUFO Reporting System is an Internet solution for enterprises. A SQL injection vulnerability exists in UFIDA NC-IUFO Reporting System, which can be exploited by attackers to obtain sensitive information from the database...

Reflective Cross-site Scripting Vulnerability in UFIDA NC-IUFO Reporting System

UFIDA NC-IUFO Reporting System is an Internet solution for enterprises. A reflective cross-site scripting vulnerability exists in the UFIDA NC-IUFO Reporting System. The vulnerability allows an attacker to insert malicious js code into a page to obtain user cookies and other information, leading ...

SQL Injection Vulnerability in UFIDA Software NC-IUFO System

UFIDA NC-IUFO system is a financial management software. The UFIDA NC-IUFO system suffers from a SQL injection vulnerability that can be exploited by an attacker to gain access to website database information...

用友NC-IUFO系统 /epp/detail/publishinfodetail.jsp SQL注入漏洞

No description provided by source...

Yonyou NC-IUFO /epp/LoginServerDo.jsp SQL注入漏洞

No description provided by source...

Yonyou NC-IUFO /epp/detail/publishinfodetail.jsp SQL注入漏洞

No description provided by source...

Ufida NC-IUFO system generic SQL injection-vulnerability warning-the black bar safety net

http://nc.xhlbdc.com/epp/detail/publishinfodetail.jsp?pkmessage=1002F410000000019JNX http://nc.pinggugroup.com:81/epp/detail/publishinfodetail.jsp?pkmessage=1002A31000000000BS0X http://erp.suning.com.cn/epp/core/public/infodetail.jsp?pkmessage=1003271000000000YB2N...

用友NC-IUFO系统通用SQL注入

简要描述： rt 详细说明： 有人提交了，就顺手来看看 漏洞文件：core/public/singleplandetail.jsp 漏洞参数：pk=1012F41000000000WA2V 漏洞类型：SQL注入漏洞（GET型） 影响用户： 收集几个案例，方便测试 http://nc.xhlbdc.com/epp/core/public/singleplandetail.jsp?pk=1012F41000000000WA2V...