Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:yonyou:u8_crm:*:*:*:*:*:*:*:*

2 briefs RSS
high threat

Arbitrary File Read in Yonyou U8 CRM

An unauthenticated arbitrary file read vulnerability (CVE-2023-54403) in Yonyou U8 CRM allows attackers to bypass authentication and access sensitive files on the host server.

exploited U8 CRM cve-2023-54403 arbitrary-file-read yonyou
2t 1c
critical threat

Unauthenticated SQL Injection in Yonyou U8 CRM (CVE-2024-58385)

An unauthenticated SQL injection vulnerability in Yonyou U8 CRM allows attackers to execute arbitrary SQL commands via the fillbacksettingedit.php endpoint, potentially leading to remote code execution on MS SQL Server instances.

exploited U8 CRM web-application sql-injection remote-code-execution cve-2024-58385
1r 2t 1c