References https://security.yonyou.com/#/noticeInfo?id=562 https://www.cnvd.org.cn/flaw/show/CNVD-2024-27592 https://www.secevery.com/toBugInfo?id=1801481848279441410
Related VulnerabilitiesPoC用友U8 CRM /background/reservationcomplete.php 未授权访问漏洞用友U8 CRM /lead/leadconversion.php SQL 注入漏洞用友 U8 CRM /ajax/getsrvtemplate.php/getproductdata SQL 注入漏洞PoCyonyou-u8-crm-fileread: 用友U8 CRM V13-V16.5系统任意文件读取PoCyonyou-u8-crm-getemaildata-uploadfile: 用友 U8 CRM客户关系管理系统 getemaildata.php 任意文件上传漏洞PoCyonyou-u8-crm-lfi: UFIDA U8 CRM getemaildata.php - Arbitrary File Read用友U8 CRM checkselectpartapply.php SQL注入漏洞用友U8+crm bgt/recievesms.php存在sql注入漏洞关于U8+ CRM产品存在SQL注入漏洞的公告用友U8 CRM /ajax/getufvouchdata.php getAffectAttr SQL 注入漏洞