yonyou-u8-oa-sqli: Yonyou U8 OA sqli

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://s4e.io/tools/yonyou-u8-grp-sql-injection-detection-scanner
• https://www.tencentcloud.com/document/product/627/38435
• https://github.com/Co5mos/nuclei-tps/blob/main/http/vulnerabilities/yonyou/yonyou-u8-registerservlet-sqli.yaml
• https://www.cnblogs.com/pursue-security/p/17685261.html
• https://github.com/adysec/POC/blob/main/wpoc/%E7%94%A8%E5%8F%8BOA/%E7%94%A8%E5%8F%8BU8-cloud%20RegisterServlet%E6%8E%A5%E5%8F%A3%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md
• https://www.cnblogs.com/pursue-security/p/17795377.html
• https://www.cnvd.org.cn/patchInfo/show/805896
• https://s4e.io/tools/yonyou-u8-sql-injection-scanner
• https://zhuanlan.zhihu.com/p/501515796
• https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E7%94%A8%E5%8F%8BOA/%E7%94%A8%E5%8F%8BU8-Cloud%E7%B3%BB%E7%BB%9F%E6%8E%A5%E5%8F%A3MultiRepChooseAction%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E.md

Related Vulnerabilities

• PoCgeoserver-jsonarraycontains-sqli: GeoServer jsonArrayContains CQL Filter - SQL Injection
• PoCweaver-ecology9-doc-list-sqli: Weaver E-cology9 api/doc/out/more/list SQL Injection
• PoCchanjet-crm-sqli: Chanjet CRM - SQL Injection
• PoCCVE-2025-66744: Yonyou YonBIP - Path Traversal
• PoCyonyou-u9-patchfile-upload: Yonyou U9 PatchFile.asmx - Unauthenticated Arbitrary File Upload
• amtt-hiboss-language-sqli: 安美数字酒店宽带运营系统SQL注入漏洞
• chanjet-tplus-checkpassword-sqli: 用友 畅捷通T+ CheckPassword SQL注入漏洞
• duomicms-sqli: Duomicms sqli
• ecology-ebridge-addtaste-sqli: 泛微云桥 taste/addTaste SQL注入
• ecology-ifnewscheckoutbycurrentuser-dwr-sqli: 泛微 E-Cology ifnewscheckoutbycurrentuser.dwr SQL 注入
• fangweicms-sqli: FangweiCMS sqli
• feiqi-parsetree-sqli: 飞企互联-FE企业运营管理平台 parseTree 接口SQL注入
• finecms-sqli: FineCMS sqli