References https://www.ufida168.com/case_detail/4482.html https://www.ufida168.com/case2_1/p-3096-6.html https://www.cnblogs.com/ZyonSec/p/18984904 https://blog.csdn.net/qq_36334672/article/details/136449407 https://cn-sec.com/archives/2537731.html https://www.ufida168.com/case_detail/4483.html
Related Vulnerabilities用友 U9Cloud FinancialIndexWebService 未授权反序列化漏洞PoCyonyou-u9-patchfile-upload: Yonyou U9 PatchFile.asmx - Unauthenticated Arbitrary File Upload关于U9数据字典应用ClassView存在SQL注入漏洞的安全通告关于U9 cloudERP软件接口Print/PDFDirectPrint.aspx存在命令执行漏洞的安全通告PoCyonyou-u9-getconnectionstring-disclosure: 用友u9系统接口GetConnectionString存在信息泄露漏洞PoCyonyou-u9-patchfile-fileupload: 用友U9 PatchFile.asmx接口任意文件上传关于U9 cloudERP软件接口存在任意文件读取漏洞的公告关于U9智能工厂api/base/getFileStream接口存在任意文件读取漏洞的安全通告关于U9智能工厂存在未授权访问漏洞的安全通告用友 U9 Cloud PDFDirectPrint.aspx 命令执行漏洞关于U9 cloudERP软件附件预览接口存在SQL注入漏洞的安全通告