Ufida icc website Customer Service System Remote Code Execution Vulnerability

Release date:
Updated on:

Affected Systems:
UFIDA ICC
Description:
--------------------------------------------------------------------------------
Yonyou ICC is an enterprise-level Internet Call Center and its application solution launched by yonyou software. ICC is short for "Internet Call Center" and Internet Call Center.

A security vulnerability exists in the customer service system of ufida icc. Remote attackers can exploit this vulnerability to gain administrator privileges.

<* Source: only_guest

Link: http://www.wooyun.org/bugs/wooyun-2010-04685/manage
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Yonyou
----
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://www.ufida.com.cn/