yonyou-grp-u8-logs-disclosure: 用友 GRP-U8 管理平台 logs 敏感信息泄露

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/xhs-d/Yongyou_GRP-U8/blob/main/README.md
• https://www.cnblogs.com/pursue-security/p/17685052.html
• https://github.com/zan8in/wy876-POC/blob/main/%E7%94%A8%E5%8F%8BOA/%E7%94%A8%E5%8F%8BGRP-U8%E6%97%A5%E5%BF%97%E6%B3%84%E6%BC%8F%E6%BC%8F%E6%B4%9E.md
• https://www.ddpoc.com/poc/DVB-2023-4895.html
• https://github.com/MzzdToT/HAC_Bored_Writing

Related Vulnerabilities

• PoCafterlogic-path-disclosure: AfterLogic Aurora and WebMail Pro < 7.7.9 - Full Path Disclosure
• 用友GRP-U8Cloud /jmreport/loadTableData SQL 注入漏洞
• 用友 GRP-U8Cloud /jmreport/queryFieldBySql Freemarker 命令执行漏洞
• 关于用友GRP-U8Cloud产品getBudgetReleaseProjectList及U8AppProxy及fbpm-modeler存在命令执行漏洞的安全通告
• PoCweaver-getemdslist-disclosure: Weaver E-cology getEmDsList Sensitive Information Disclosure
• 关于用友GRP-U8Cloud产品(api/xx/xxx)存在前台sql注入导致命令执行漏洞的安全通告
• 关于用友GRP-U8Cloud产品存在前台无条件远程命令执行漏洞的安全通告
• 关于用友GRP-U8Cloud产品(yrule/xxx)接口存在命令执行漏洞的安全通告
• PoCdlink-dsl2600u-rom0-disclosure: D-Link DSL2600U - Unauthenticated rom-0 Configuration Disclosure
• 关于用友GRP-U8Cloud产品jmreport组件模块存漏洞的安全通告
• 关于用友GRP-U8Cloud产品(XXX/getDataTypeList及XXX/getFAInfo)接口存在SQL注入漏洞的安全公告
• PoCCVE-2025-66744: Yonyou YonBIP - Path Traversal
• PoCsweetrice-backup-disclosure: SweetRice CMS 1.5.1 - Backup Disclosure