PT-2025-44082

Name of the Vulnerable Software and Affected Versions Yonyou U8 Cloud versions prior to 5.1sp Description A flaw exists in Yonyou U8 Cloud that allows for unrestricted file upload. This issue stems from manipulation of the ts/sign argument within a request header handled by an unknown function in...

SQL Injection Vulnerability in U8 Cloud of UFIDA Network Technology Co.

U8 Cloud is a digital platform for enterprises to go to the cloud, integrating transactions, services and management into a total ERP solution. A SQL injection vulnerability exists in UFIDA U8 Cloud, which can be exploited by attackers to gain access to sensitive database information...

SQL Injection Vulnerability in U8 Cloud of UFIDA Network Technology Co.

U8 Cloud is a digital platform for enterprises to go to the cloud, integrating transactions, services and management into a total ERP solution. A SQL injection vulnerability exists in UFIDA U8 Cloud, which can be exploited by attackers to gain access to sensitive database information...

SQL Injection Vulnerability in U8 Cloud of UFIDA Network Technology Co.

U8 Cloud is a new-generation cloud ERP Enterprise Resource Planning solution launched by UFIDA, mainly for growing and innovative enterprises, aiming to provide a comprehensive enterprise-level cloud ERP total solution. A SQL injection vulnerability exists in UFIDA U8 Cloud, which can be exploite...

SQL Injection Vulnerability in U8 Cloud of UFIDA Network Technology Co.

U8 Cloud is a set of enterprise Internet application design concepts based on Internet application, business collaboration, and network transactions, providing growing enterprises with a cloud ERP total solution integrating people, property and customers, production, supply and marketing. A SQL...

UFIDA U8 Cloud suffers from SQL injection vulnerability (CNVD-2024-37307)

U8 Cloud is an enterprise-class ERP used to help companies achieve efficient and digital business collaboration and process management. A SQL injection vulnerability exists in UFIDA U8 Cloud, which can be exploited by remote attackers to submit a special request and obtain sensitive database...

UFIDA U8 Cloud suffers from SQL injection vulnerability (CNVD-2024-36940)

U8 Cloud is a digital platform for enterprises to go to the cloud, integrating transactions, services and management into a total ERP solution. A SQL injection vulnerability exists in UFIDA U8 Cloud, which can be exploited by attackers to gain access to sensitive database information...

UFIDA U8 Cloud suffers from SQL injection vulnerability (CNVD-2024-34008)

U8 cloud is a new-generation cloud ERP launched by UFIDA, focusing on growing and innovative enterprises and providing enterprise-level cloud ERP solutions. A SQL injection vulnerability exists in UFIDA U8 Cloud, which can be exploited by attackers to obtain sensitive information from the databas...

UFIDA U8 Cloud suffers from SQL injection vulnerability (CNVD-2024-33023)

U8 cloud is a new-generation cloud ERP launched by UFIDA, focusing on growing and innovative enterprises and providing enterprise-level cloud ERP solutions. A SQL injection vulnerability exists in UFIDA U8 Cloud, which can be exploited by attackers to obtain sensitive information from the databas...

UFIDA U8 Cloud suffers from SQL injection vulnerability (CNVD-2024-22710)

U8 Cloud is a digital platform for enterprises to go to the cloud, integrating transactions, services and management into a total ERP solution. A SQL injection vulnerability exists in UFIDA U8 Cloud, which can be exploited by attackers to gain access to sensitive database information...

UFIDA U8 Cloud suffers from SQL injection vulnerability (CNVD-2024-22713)

U8 Cloud is a digital platform for enterprises to go to the cloud, integrating transactions, services and management into a total ERP solution. A SQL injection vulnerability exists in UFIDA U8 Cloud, which can be exploited by attackers to gain access to sensitive database information...

Command execution vulnerability exists in UFIDA U8 Cloud (CNVD-2023-91638)

UFIDA Network Technology Corporation is an enterprise cloud services and software provider. A command execution vulnerability exists in UFIDA U8 Cloud, which can be exploited by attackers to execute arbitrary commands...

Deserialization Vulnerability in U8 Cloud of UFIDA Network Technologies Co.

U8 Cloud is a digital platform for enterprises to go to the cloud, integrating transactions, services and management into a total ERP solution. A deserialization vulnerability exists in UFIDA U8 Cloud, which can be exploited by attackers to remotely execute commands...

Logic flaw vulnerability in U8 cloud of UFIDA Network Technology Co.

U8 cloud is a new-generation cloud ERP launched by UFIDA, which mainly focuses on growing and innovative enterprises and provides enterprise-level cloud ERP total solutions. A logic flaw vulnerability exists in UFIDA U8 cloud, which can be exploited by attackers to obtain sensitive information...

Command execution vulnerability in U8 cloud of UFIDA Network Technology Co.

U8 cloud is a new-generation cloud ERP launched by UFIDA, which mainly focuses on growing and innovative enterprises and provides enterprise-level cloud ERP total solutions. A command execution vulnerability exists in UFIDA U8 cloud, which can be exploited by an attacker to gain control of the...