References https://update.nsfocusglobal.com/update/listNewipsDetail/v/rule5.6.11_v2 https://update.nsfocusglobal.com/update/listNewipsDetail/v/rule5.6.10 https://update.nsfocusglobal.com/update/listNewipsDetail/v/rule5.6.11 https://github.com/j2ekim/YonyouNC_Tip https://nosec.org/m/share/4472.html https://github.com/novysodope/fupo_for_yonyou
Related VulnerabilitiesPoCCVE-2026-0702: VidShop for WooCommerce <= 1.1.4 - SQL InjectionPoCCVE-2026-81578: PaperCut NG/MF <=26.0.4 - Unauthenticated ConfigEditor Access via Tapestry Complex-DirectPoCjohnson-controls-default-login: Johnson Controls Frick Quantum HD Compressors - Default LoginJoomShaper SP LMS /index.php?option=com_splms&view=cart 文件上传漏洞(CVE-2026-48909)綠色運算|NUMail - OS Command InjectionPoCCVE-2026-11387: SMS Alert – SMS & OTP for WooCommerce - Privilege EscalationPoCCVE-2020-10221: rConfig <= 3.9.4 - Authenticated OS Command Injection美麗島安全科技|4MOSAn GCB Doctor - OS Command InjectionPoCCVE-2026-19900: LB-LINK Routers - Unauthenticated Command InjectionPoCCVE-2026-71362: Adobe Commerce/Magento - Customer Session Identity SwitchPoCccm-detect: Clear-Com Core Configuration Manager Panel - DetectPoCsolarview-compact-pow-xss: SolarView Compact 6.00 - 'pow' Cross-Site ScriptingPoCsolarview-compact-time-begin-xss: SolarView Compact 6.00 - 'time_begin' Cross-Site Scripting