Description 【漏洞对象】用友NC系统 【漏洞描述】用友-UFIDA-NC企业管理软件/epp/html/nodes/upload/SupdocDo.jsp文件areaname参数存在sql注入
Related Vulnerabilities畅捷通T+ERP系统Ufida.T.SM.FC.UIP接口处存在反序列化漏洞畅捷通T+ /tplus/ajaxpro/Ufida.T.SM.UIP.MultiCompanySettingController.Ufida.T.SM.UIP.ashx SQL 注入漏洞yonyou-ufida-oa-uapws-xxe: 用友 UFIDA OA XXEPoCCVE-2025-2709: Yonyou UFIDA ERP-NC V5.0 - Cross-Site ScriptingPoCCVE-2025-2710: Yonyou UFIDA ERP-NC V5.0 - Cross-Site ScriptingPoCCVE-2025-2711: Yonyou UFIDA ERP-NC V5.0 - Cross-Site ScriptingPoCCVE-2025-2712: Yonyou UFIDA ERP-NC V5.0 - Cross-Site ScriptingPoCCVD-2023-3118: 用友 UFIDA ActionHandlerServlet 反序列化漏洞PoCyonyou-ufida-ksoa-image-upload-file: 用友-时空KSOA ImageUpload 任意文件上传PoCCNVD-2021-30167: UFIDA NC BeanShell Remote Command ExecutionPoCCNVD-C-2023-76801: UFIDA NC uapjs - Remote Code ExecutionPoCCNVD-2024-33023: UFIDA U8 Cloud - SQL InjectionPoCchanjet-tplus-fileupload: UFIDA Chanjet TPluse Upload.aspx - Arbitrary File Upload