Command Execution Vulnerability in NC Cloud of UFIDA Network Technology Corporation (CNVD-2020-64877)

NC Cloud is a digital platform for large enterprises, focusing on digital management, digital operation and digital business, helping large enterprises realize the comprehensive digitalization of people, money, goods and customers. A command execution vulnerability exists in NC Cloud of UFIDA...

XML Entity Injection Vulnerability in NC Cloud of UFIDA Network Technology Co.

NC Cloud is a digital platform for large enterprises, focusing on digital management, digital operation and digital business, helping large enterprises realize the comprehensive digitalization of people, money, goods and customers. An XML entity injection vulnerability exists in NC Cloud of UFIDA...

XML Entity Injection Vulnerability in NC Cloud of UFIDA Network Technology Corporation (CNVD-2020-64771)

NC Cloud is a digital platform for large enterprises, focusing on digital management, digital operation and digital business, helping large enterprises realize the comprehensive digitalization of people, money, goods and customers. An XML entity injection vulnerability exists in NC Cloud of UFIDA...

SQL Injection Vulnerability in NC Cloud of UFIDA Network Technology Corporation (CNVD-2020-64774)

NC Cloud is a digital platform for large enterprises, focusing on digital management, digital operation and digital business, helping large enterprises realize the comprehensive digitalization of people, money, goods and customers. A SQL injection vulnerability exists in NC Cloud of UFIDA Network...

SQL Injection Vulnerability in UFIDA GRP-U8 Higher Education Internal Control Management Software of Beijing UFIDA Administrative Software Co.

Beijing UFIDA Government Software Co., Ltd. was jointly established by UFIDA Group and the Institute of Fiscal Science of the Ministry of Finance, and is an all-around business management informatization solution provider for government departments, institutions and non-profit organizations. A SQ...

Unauthorized Access Vulnerability in UFIDA TurboCRM

UFIDA TurboCRM is a customer relationship management system. An unauthorized access vulnerability exists in UFIDA TurboCRM. An attacker can exploit the vulnerability to obtain sensitive information...

SQL Injection Vulnerability in UFIDA U8-OA

Founded in 1988, UFIDA is a global provider of advanced cloud services, software, and financial services for enterprises and public organizations. A SQL injection vulnerability exists in UFIDA U8-OA, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Changchun Engineering College's UFIDA GRP-U8 Administrative Business Internal Control Management Software

An unauthorized sql injection vulnerability exists in the Proxy page, where a database query is performed by constructing a post packet, and the results are returned and printed in the page source code. url: http://210.47.33.162/u8qx/Tindex.jsp Type: post sqlmap command: cVer=9.8.0&dp=?xml...

XML Entity Injection Vulnerability in UFIDA NC Cloud at UFIDA Network Technology Co.

NC Cloud is a large-scale enterprise digitalization platform, focusing on digital management, digital operation and digital business, helping large-scale enterprises realize the comprehensive digitalization of people, money, goods and customers. An XML entity injection vulnerability exists in UFI...

File Upload Vulnerability in UFIDA NC Cloud

UFIDA NC Cloud is a digital cloud platform for large enterprises, serving large enterprises in business innovation, management change and digital transformation. A file upload vulnerability exists in UFIDA NC Cloud. An attacker can exploit the vulnerability to upload a webshell and gain server...

Remote Code Execution Vulnerability in UFIDA NC at UFIDA Network Technology Co.

UFIDA NC V6.5 is UFIDA Software's main Internet platform-based ERP system. A remote code execution vulnerability exists in UFIDA NC, which can be exploited by an attacker to gain server control privileges...

Command Execution Vulnerability in UFIDA NC at UFIDA Network Technology Co.

UFIDA NC products are world-class high-end management software for group enterprises. A command execution vulnerability exists in UFIDA NC, which can be exploited by attackers to gain server control privileges...

UFIDA NC JNDI Remote Code Execution Vulnerability

UFIDA N is a world-class high-end management software for conglomerates, and its domestic users cover most of the critical infrastructure operating units. A remote code execution vulnerability exists in UFIDA NC JNDI, which can be exploited by an attacker to send maliciously constructed data...

SQL Injection Vulnerability in UFIDA NC

UFIDA NC6 is a new series of UFIDA NC products, a world-class high-end management software for group enterprises. A SQL injection vulnerability exists in UFIDA NC, which can be exploited by attackers to obtain sensitive database information...

Unauthorized Access Vulnerability in UFIDA NC Cloud at UFIDA Network Technology Co.

NC Cloud is a new-generation cloud ERP product developed by UFIDA's IoT, big data, artificial intelligence and other technologies. An unauthorized access vulnerability exists in UFIDA NC Cloud, which can be exploited by attackers to cause data and information leakage...

JAVA Deserialization Remote Command Execution Vulnerability in UFIDA NC

UFIDA NC products are world-class high-end management software for group enterprises, with a market share that has reached the first in Asia Pacific among similar products, and have been applied in 8,000 group enterprises, with domestic users covering most critical infrastructure operating units....

SQL Injection Vulnerability in UFIDA NC-IUFO Reporting System

UFIDA NC-IUFO Reporting System is an Internet solution for enterprises. A SQL injection vulnerability exists in UFIDA NC-IUFO Reporting System, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in UFIDA uMall

UFIDA U Mall realizes multi-dimensional product management, personalized shopping experience, comprehensive membership management, flexible marketing management, online and offline integration, and omni-channel O2O marketing solutions. A SQL injection vulnerability exists in UFIDA U Mall. An...

Multiple JAVA Deserialization Vulnerabilities in UFIDA NC System

UFIDA NC system is a world-class high-end management software for group enterprises. There are multiple JAVA deserialization vulnerabilities in UFIDA NC system, which can be exploited by attackers to remotely execute operating system commands and obtain server control privileges...

DOM Cross-Site Scripting Vulnerability in UFIDA U8+ Financial System

UFIDA U8+ is a fine financial software. A stored cross-site scripting vulnerability exists in the UFIDA U8+ financial system. It allows an attacker to insert malicious js code into a page to obtain user cookies and other information, leading to user hijacking...