Description
用友 Yonyou UFIDA ERP-NC是中国Yonyou（用友）公司的一个电子商务平台。 Yonyou UFIDA ERP-NC 5.0版本存在代码注入漏洞，该漏洞源于跨站脚本攻击，可能导致远程攻击。
Yonyou UFIDA ERP-NC 代码注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://cve.imfht.com/detail/CVE-2025-2712
https://avd.aliyun.com/detail?id=AVD-2025-2712
https://github.com/adysec/POC/blob/main/wpoc/%E7%94%A8%E5%8F%8BOA/%E7%94%A8%E5%8F%8BNC%E7%B3%BB%E7%BB%9F%E6%8E%A5%E5%8F%A3yerfile_down%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
https://cvepremium.circl.lu/vuln/cnvd-2025-12808
https://nvd.nist.gov/vuln/detail/CVE-2025-2710
https://www.opencve.io/cve/CVE-2025-2709
https://www.cvedetails.com/product/179901/Yonyou-Ufida-Erp-nc.html?vendor_id=25758
https://www.cve.org/CVERecord?id=CVE-2025-2712