265 matches found
XSS cross-site scripting vulnerability in the 'language' parameter of UFIDA U8+ system
UFIDA U8+ is to support enterprises to realize multi-end PC, cell phone, tablet and other devices multi-system windows, iOS, Android and other mainstream systems application deployment of business software. An XSS cross-site scripting vulnerability exists in the 'language' parameter of the UFIDA...
Ufo UFO-UAPWS suffers from SQL error reporting injection vulnerability (CNVD-2016-10770)
Ufo UFO-UAPWS Reporting System is an Internet solution for enterprises. A SQL reporting error injection vulnerability exists in UFIDA UFO-UAPWS. An attacker exploiting the vulnerability can view sensitive information, obtain database information, and cause information leakage...
SQL Injection Vulnerability in UFIDA UFO System queryRefdataByQueryVO Interface
UFIDA UFO system is UFIDA software comes with tabular data processing software. A SQL injection vulnerability exists in the queryRefdataByQueryVO interface of UFIDA UFO System. An attacker is allowed to exploit the vulnerability to obtain database information...
SQL Injection Vulnerability in UFIDA UFO System queryMaxlev method
UFIDA UFO system is UFIDA software comes with tabular data processing software. A SQL injection vulnerability exists in the UFIDA UFO System queryMaxlev method. An attacker is allowed to exploit the vulnerability to obtain database information...
SQL Injection Vulnerability in UFIDA UFO System queryByWhere Interface
UFIDA UFO system is UFIDA software comes with tabular data processing software. A SQL injection vulnerability exists in the queryByWhere interface of UFIDA UFO System. An attacker is allowed to exploit the vulnerability to obtain database information...
SQL Injection Vulnerability in the queryInvcl Method of the UFIDA UFO System
UFIDA UFO system is UFIDA software comes with tabular data processing software. A SQL injection vulnerability exists in the queryInvcl method of UFIDA UFO System. An attacker is allowed to exploit the vulnerability to obtain database information...
Command Execution Vulnerability in UFIDA UFO System
UFIDA UFO system is UFIDA software comes with tabular data processing software. A command execution vulnerability exists in UFIDA UFO System. The vulnerability allows attackers to execute operating system commands...
SQL Injection Vulnerability in UFIDA Financials /target/services/operOriztion?wsdl Page
UFIDA Financials is a financial management software. A SQL injection vulnerability exists in the UFIDA Financial System /target/services/operOriztion?wsdl page. An attacker can exploit the vulnerability to obtain database information...
File Upload Vulnerability in UFIDA Financials
UFIDA Financials is a financial management software. A file upload vulnerability exists in UFIDA Financial System. Vulnerability payload: http://target/TaskManager/EBankTaskServlet?m=1&taskjson=cnvdtest&taskname=... /... /R9iPortal/upload/cnvd.jsp%00&optionType=create Submitting the above request...
SQL Injection Vulnerability in UFIDA Financials /target/services/userInfoWeb?wsdl Page
UFIDA Financials is a financial management software. A SQL injection vulnerability exists in the UFIDA Financial System /target/services/userInfoWeb?wsdl page. An attacker can exploit the vulnerability to obtain database information...
java deserialization vulnerability in some IPs of UFNC
UFIDA NC system provides group enterprises with a new large-scale enterprise management and e-business platform that supports compliance application requirements and innovation needs, as well as personalized configuration, integration, implementation, operation and maintenance, and management...
Reflective Cross-site Scripting Vulnerability in UFIDA NC-IUFO Reporting System
UFIDA NC-IUFO Reporting System is an Internet solution for enterprises. A reflective cross-site scripting vulnerability exists in the UFIDA NC-IUFO Reporting System. The vulnerability allows an attacker to insert malicious js code into a page to obtain user cookies and other information, leading ...
Multiple XSS Cross-Site Scripting Vulnerabilities in UFIDA ISM System
UFIDA ISM system is a new generation of enterprise IT service management products. Multiple XSS cross-site scripting vulnerabilities exist in UFIDA ISM System. It allows an attacker to insert malicious js code into a page to obtain user cookies and other information, leading to user hijacking. Th...
Multiple Vulnerabilities in UFIDA PLM System
UFIDA PLM system Product Lifecycle Management is a strategic management method. The UFIDA PLM system suffers from java deserialization and JBoss remote command execution vulnerabilities. An attacker is allowed to execute system commands and gain server privileges...
SQL Injection Vulnerability in UFIDA Software NC-IUFO System
UFIDA NC-IUFO system is a financial management software. The UFIDA NC-IUFO system suffers from a SQL injection vulnerability that can be exploited by an attacker to gain access to website database information...
用友某系统多处注入漏洞打包
简要描述： wooyun搜了一下，没有人提，来一发。 详细说明： 首先，该接口是无需权限访问的。 已http://.../bugs/wooyun-2010-0178322为例： ...:8080/uapws/service/nc.itf.bd.crm.ICurrtypeExportToCrmService?wsdl ...:8080/uapws/service/nc.itf.bd.crm.IInvbasdocExportToCrmService?wsdl ...:8080/uapws/service/nc.itf.bd.crm.IMeasdocExportToCrmService?wsd...
UFIDA Software TruboCRM Management System SQL Injection Vulnerability
TruboCRM Management System is a customer relationship management system. A SQL injection vulnerability exists in UFIDA Software TruboCRM Management System, which allows attackers to exploit the vulnerability to gain access to sensitive database information...
UFIDA ICC System Arbitrary File Upload Vulnerability
UFIDA ICC system is a set of enterprise-level Internet call center and its application solutions. An arbitrary file upload vulnerability exists in the UFIDA ICC System that allows remote attackers to upload specially crafted files and execute arbitrary code...
Information Disclosure and Arbitrary File Upload Vulnerability in UFIDA NC-IUFO Reporting System
UFIDA NC-IUFO Reporting System is a comprehensive enterprise-level data integration application system developed by UFIDA Software Co. The UFIDA NC-IUFO Reporting System suffers from an information disclosure and arbitrary file upload vulnerability, which allows an attacker to exploit this...