RULE(RULE ID:339093)

Rule General Information
Release Date: 2025-06-18
Rule Name: Yonyou U8-CRM rellistname.php SQL Injection Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: Yonyou U8 CRM is a customer relationship management software designed for small and medium-sized enterprises. It helps businesses manage customer information, automate sales processes, conduct marketing activities, and provide customer services, thereby enhancing customer satisfaction and sales performance. There is an SQL injection vulnerability in the rellistname.php file of Yonyou U8-CRM. Attackers can exploit this vulnerability to steal sensitive information, tamper with database data, take control of the database server, and potentially further compromise the entire system.
Impact: An attacker can inject arbitrary sql commands to view or change the database of the target by exploiting the vulnerability successfully.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.