RULE(RULE ID:339081)

Rule General Information
Release Date: 2025-06-18
Rule Name: Yonyou U8-Cloud base64 interface SQL Injection Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: Yonyou U8 Cloud is a cloud-based ERP solution launched by Yonyou for growing and innovative enterprises. It supports multi-organizational business collaboration, intelligent finance, supply chain management, and other functions to help enterprises achieve digital transformation. There is an SQL injection vulnerability in its Base64 interface. Attackers can exploit this vulnerability to steal sensitive information, tamper with database data, take control of the database server, and potentially further compromise the entire system.
Impact: An attacker can inject arbitrary sql commands to view or change the database of the target by exploiting the vulnerability successfully.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.