PT-2025-12679 · Yonyou · Yonyou Ufida Erp-Nc

Name of the Vulnerable Software and Affected Versions: Yonyou UFIDA ERP-NC version 5.0 Description: A vulnerability was found in Yonyou UFIDA ERP-NC, affecting an unknown functionality of the file /help/top.jsp. The manipulation of the langcode argument leads to cross site scripting. The attack c...

PT-2025-12704 · Yonyou · Yonyou Ufida Erp-Nc

Name of the Vulnerable Software and Affected Versions: Yonyou UFIDA ERP-NC version 5.0 Description: A problematic issue was found in the software, affecting an unknown function of the file /help/systop.jsp. The manipulation of the langcode argument leads to cross-site scripting. It is possible to...

SQL Injection Vulnerability in UFIDA BIP of UFIDA Network Technology Co.

UFIDA is a leading provider of management software, ERP software, group management software, human resource management software, customer relationship management software, small business management software, financial and administrative institution management software, automotive industry...

SQL Injection Vulnerability in U8 Cloud of UFIDA Network Technology Co.

U8 Cloud is a digital platform for enterprises to go to the cloud, integrating transactions, services and management into a total ERP solution. A SQL injection vulnerability exists in UFIDA U8 Cloud, which can be exploited by attackers to gain access to sensitive database information...

SQL Injection Vulnerability in UFIDA U8CRM at UFIDA Network Technology Co.

UFIDA U8CRM is a professional business management software. A SQL injection vulnerability exists in UFIDA U8CRM, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in UFIDA NC of UFIDA Network Technology Co.

UFIDA NC is a comprehensive business management software for large enterprises. A SQL injection vulnerability exists in UFIDA NC, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Data Application Server of UFIDA Network Technology Co.

UFIDA is a leading provider of management software, ERP software, group management software, human resource management software, customer relationship management software, small business management software, financial and administrative institution management software, automotive industry...

SQL Injection Vulnerability in UFIDA NC of UFIDA Network Technology Co.

UFIDA NC is a large erp enterprise management system and e-commerce platform. A SQL injection vulnerability exists in UFIDA NC, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in U8 Cloud of UFIDA Network Technology Co.

U8 Cloud is a new-generation cloud ERP Enterprise Resource Planning solution launched by UFIDA, mainly for growing and innovative enterprises, aiming to provide a comprehensive enterprise-level cloud ERP total solution. A SQL injection vulnerability exists in UFIDA U8 Cloud, which can be exploite...

SQL Injection Vulnerability in U8 Cloud of UFIDA Network Technology Co.

U8 Cloud is a set of enterprise Internet application design concepts based on Internet application, business collaboration, and network transactions, providing growing enterprises with a cloud ERP total solution integrating people, property and customers, production, supply and marketing. A SQL...

SQL Injection Vulnerability in UFIDA NC of UFIDA Network Technology Co. Ltd (CNVD-C-2024-947797)

UFIDA NC is a large erp enterprise management system and e-commerce platform. A SQL injection vulnerability exists in UFIDA NC, which can be exploited by attackers to obtain sensitive database information...

UFIDA Network Technology Corporation U8+ CRM has a logic flaw vulnerability

UFIDA U8+CRM is a management software designed specifically for the agency sales and service industry that integrates CRM, call center, and OA core applications and provides integrated applications for front-end marketing, back-end business processing, and employee management. A logic flaw...

Command Execution Vulnerability in UFIDA NC at UFIDA Network Technology Co.

UFIDA NC is a large erp enterprise management system and e-commerce platform. A command execution vulnerability exists in UFIDA NC, which can be exploited by an attacker to execute arbitrary commands...

XML Entity Injection Vulnerability in U8Cloud of UFIDA Network Technology Co.

U8cloud is a new-generation cloud ERP launched by UFIDA, which mainly focuses on growing and innovative enterprises and provides enterprise-level cloud ERP total solutions. UFIDA U8Cloud suffers from an XML entity injection vulnerability that can be exploited by attackers to obtain sensitive...

Arbitrary File Read Vulnerability in YonBIP of UFIDA Network Technology Co.

YonBIP is a new generation of UFIDA's world-leading enterprise digital intelligence platform and application software, which UFIDA began to strategically invest in and develop at scale in 2017. An arbitrary file read vulnerability exists in YonBIP of UFIDA Network Technology Corporation, which ca...

Arbitrary File Read Vulnerability in UFIDA NC at UFIDA Network Technology Co.

UFIDA NC is a large erp enterprise management system and e-commerce platform. UFIDA NC suffers from an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in NC of UFIDA Network Technology Co.

UFIDA is a leading provider of management software, ERP software, group management software, human resource management software, customer relationship management software, small business management software, financial and administrative institution management software, automotive industry...

XML Entity Injection Vulnerability in UFIDA NC at UFIDA Network Technology Co.

UFIDA NC is a comprehensive business management software for large enterprises. An XML entity injection vulnerability exists in UFIDA NC, which can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in UFIDA U8CRM at UFIDA Network Technology Co.

UFIDA U8CRM is a professional business management software. A SQL injection vulnerability exists in UFIDA U8CRM, which can be exploited by attackers to obtain sensitive information from the database...

Information Disclosure Vulnerability in YonBIP of UFIDA Network Technology Co.

YonBIP is a digital intelligence business innovation platform created by UFIDA Group, aiming to help enterprises realize digital intelligence transformation and business innovation. An information leakage vulnerability exists in YonBIP of UFIDA Network Technology Corporation, which can be exploit...