RULE(RULE ID:339084)

Rule General Information
Release Date: 2025-06-18
Rule Name: Yonyou U8 doUpload.jsp Arbitrary File Upload Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: Yonyou U8 is an ERP management software designed for small and medium-sized enterprises, covering core functions such as finance, supply chain, and production manufacturing. It helps businesses achieve refined management and information technology upgrades. There is an arbitrary file upload vulnerability in the doUpload.jsp of Yonyou U8. Attackers can exploit this vulnerability to upload malicious files, ultimately achieving remote code execution and even taking control of the server.
Impact: Attackers can upload viruses, Trojans, WebShell, other malicious scripts or pictures containing scripts to the server, and attackers can use these files for subsequent attacks.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.