References https://www.ufida168.com/case_detail/4482.html https://www.ufida168.com/case2_1/p-3096-6.html https://www.cnblogs.com/ZyonSec/p/18984904 https://blog.csdn.net/qq_36334672/article/details/136449407 https://cn-sec.com/archives/2537731.html https://www.ufida168.com/case_detail/4483.html
Related Vulnerabilities关于U9 cloud存在命令执行漏洞的安全通告关于U9 cloud存在接口反序列化漏洞的安全通告关于U9 cloud存在接口XML注入漏洞的安全通告关于U9 cloud存在接口SQL注入漏洞的安全通告关于U9 cloud存在接口无授权访问漏洞的安全通告关于U9 cloud接口存在BinaryFormatter反序列化漏洞的安全通告用友 U9Cloud FinancialIndexWebService 未授权反序列化漏洞关于U9 cloudERP报表接口存在BinaryFormatter反序列化漏洞的安全通告PoCyonyou-u9-patchfile-upload: Yonyou U9 PatchFile.asmx - Unauthenticated Arbitrary File Upload关于U9数据字典应用ClassView存在SQL注入漏洞的安全通告