Skip to content
Threat Feed
Subscribe

Product

U8 CRM

1 brief RSS
critical threat

Unauthenticated SQL Injection in Yonyou U8 CRM (CVE-2024-58385)

An unauthenticated SQL injection vulnerability in Yonyou U8 CRM allows attackers to execute arbitrary SQL commands via the fillbacksettingedit.php endpoint, potentially leading to remote code execution on MS SQL Server instances.

exploited U8 CRM web-application sql-injection remote-code-execution cve-2024-58385
1r 2t 1c