Reproduce the arbitrary file reading vulnerability of UFIDA CRM system

Table of contents

1. Vulnerability description

Two, the impact version

3. Asset surveying and mapping

4. Vulnerability recurrence

---

1. Vulnerability description

        Yonyou TurboCRM has been committed to providing customers with products with complete structure, comprehensive functions and good scalability to support the rapid changes and growth of customers' businesses. Product Information Yonyou TurboCRM product line includes TurboCTI and Yonyou TurboLINK that support comprehensive customer contact, Yonyou TurboKEY and Yonyou TurboCRM that match multi-business models and business management, and Yonyou TurboEAI that supports seamless connection with ERP and other software and integrates applications to meet business decisions and business intelligence applications