References https://www.cnblogs.com/pursue-security/p/17795377.html https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E7%94%A8%E5%8F%8BOA/%E7%94%A8%E5%8F%8B%20GRP-U8%20bx_historyDataCheck.jsp%20SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md https://stack.chaitin.com/vuldb/detail/39c1e69a-ee6b-4c80-b740-644710182f5f https://www.secrss.com/articles/59147 https://github.com/yuziiiiiiiiii/GRP-U8-bx_historyDataCheck.jsp-SQL-POC https://stack.chaitin.com/techblog/detail/157 https://cn-sec.com/archives/2064413.html http://www.aqtd.com/nd.jsp?id=5003 https://zone.ci/aliyun/ali_highrisk/303407.html
Related Vulnerabilities用友GRP-U8Cloud /jmreport/loadTableData SQL 注入漏洞用友 GRP-U8Cloud /jmreport/queryFieldBySql Freemarker 命令执行漏洞关于用友GRP-U8Cloud产品getBudgetReleaseProjectList及U8AppProxy及fbpm-modeler存在命令执行漏洞的安全通告关于用友GRP-U8Cloud产品(api/xx/xxx)存在前台sql注入导致命令执行漏洞的安全通告关于用友GRP-U8Cloud产品存在前台无条件远程命令执行漏洞的安全通告关于用友GRP-U8Cloud产品(yrule/xxx)接口存在命令执行漏洞的安全通告关于用友GRP-U8Cloud产品jmreport组件模块存漏洞的安全通告关于用友GRP-U8Cloud产品(XXX/getDataTypeList及XXX/getFAInfo)接口存在SQL注入漏洞的安全公告yonyou-grp-u8-logs-disclosure: 用友 GRP-U8 管理平台 logs 敏感信息泄露PoCyonyou-grp-u8-app-proxy-uploadfile: 用友 GRP-U8 U8AppProxy 任意文件上传PoCyonyou-grp-u8-bx_historyDataChecks-sqli: 用友GRP-U8 bx_historyDataCheck.jsp SQL注入漏洞PoCyonyou-grp-u8-fileupload: 用友 GRP U8 FileUpload存在任意文件上传漏洞PoCyonyou-grp-u8-license-check-sqli: 用友GRP-U8 license_check.jsp 存在sql注入漏洞