CVE-2025-66744 PoC — Yonyou YonBIP 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-66744.yaml

Associated Vulnerability

Title:Yonyou YonBIP 安全漏洞 (CVE-2025-66744)
Description:Yonyou YonBIP是中国用友（Yonyou）公司的一款商业创新平台。 Yonyou YonBIP 3及之前版本存在安全漏洞，该漏洞源于LoginWithV8接口存在路径遍历，可能导致未经授权访问敏感信息。

Description

Yonyou YonBIP v3 and before contains a path traversal caused by improper validation in the LoginWithV8 interface of the series data application service system, letting unauthorized attackers access sensitive information.

File Snapshot


 id: CVE-2025-66744

info:
  name: Yonyou YonBIP - Path Traversal
  author: DhiyaneshDk
  severity: h

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!