RULE(RULE ID:339085)

Rule General Information
Release Date: 2025-06-18
Rule Name: Yonyou U8 nc.bs.sm.login2.RegisterServlet SQL Injection Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: Yonyou U8 is an ERP management software designed for small and medium-sized enterprises, covering core functions such as finance, supply chain, and production manufacturing. It helps businesses achieve refined management and information technology upgrades. There is an SQL injection vulnerability in the nc.bs.sm.login2.RegisterServlet of Yonyou U8. Attackers can exploit this vulnerability to steal sensitive information, tamper with database data, take control of the database server, and potentially further compromise the entire system.
Impact: An attacker can inject arbitrary sql commands to view or change the database of the target by exploiting the vulnerability successfully.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.