Description
Yonyou YonBIP MA是中国用友（Yonyou）公司的一个商业创新平台。 Yonyou YonBIP MA 2.7版本存在路径遍历漏洞，该漏洞源于文件/mobsm/common/userfile中参数path操作不当，可能导致路径遍历攻击。
Yonyou YonBIP MA 路径遍历漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://cve.imfht.com/detail/CVE-2025-3562?lang=en
https://vulnerability.circl.lu/vuln/cnvd-2025-12806
https://wiki.shikangsi.com/post/share/7329f367-dd6e-48fb-b585-e10fbfc63bb2
https://s4e.io/tools/yonyou-yonbip-path-traversal-cve-2025-66744
https://app.opencve.io/cve/?product=yonbip&vendor=yonyou
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E7%94%A8%E5%8F%8BOA/%E7%94%A8%E5%8F%8BYonBIP%E9%AB%98%E7%BA%A7%E7%89%88yonbiplogin%E5%AD%98%E5%9C%A8%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96%E6%BC%8F%E6%B4%9E.md
https://blog.csdn.net/IDHALASHAO/article/details/143888750