References https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/%E7%94%A8%E5%8F%8BOA/%E7%95%85%E6%8D%B7%E9%80%9ATPlus-App_Code.ashx%E5%AD%98%E5%9C%A8%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.md https://www.cnblogs.com/pursue-security/p/17703915.html https://zhuanlan.zhihu.com/p/647590979 https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/webapp/%E7%94%A8%E5%8F%8B-%E7%95%85%E6%8D%B7%E9%80%9AT+-GetStoreWarehouseByStore-%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.md https://cn-sec.com/archives/2639710.html https://www.secrss.com/articles/55576 https://cn-sec.com/archives/1850005.html https://www.cnblogs.com/Domren/articles/18839975 https://nvd.nist.gov/vuln/detail/CVE-2023-7334 https://github.com/advisories/GHSA-rx3f-2v3q-q7mq
Related Vulnerabilities畅捷通T+系统 AccountExtendRuleController接口处存在反序列化漏洞畅捷通T+ERP系统Ufida.T.SM.FC.UIP接口处存在反序列化漏洞畅捷通信息技术股份有限公司畅捷通T+存在SQL注入漏洞畅捷通T+ DownLoadBlockFile 存在任意文件读取漏洞PoC畅捷通T+ /tplus/FormReport/FormReportOperateAction.aspx 文件读取漏洞畅捷通T+ /tplus/ajaxpro/Ufida.T.SM.UIP.MultiCompanySettingController.Ufida.T.SM.UIP.ashx SQL 注入漏洞用友 畅捷通T+ InitContext 登录绕过漏洞用友 畅捷通T+ SaveFileInfoToFile 任意文件上传漏洞用友 畅捷通T+ GetRecordAll 敏感信息泄露漏洞畅捷通T+ ME_MemberIntegral_IntegralAdjust 存在反序列化漏洞畅捷通T+ getdecallusers信息泄露漏洞yonyou-ufida-oa-uapws-xxe: 用友 UFIDA OA XXEPoCCVE-2025-2709: Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting